mirror of
https://github.com/openclaw/openclaw.git
synced 2026-07-15 03:16:05 +00:00
* chore(types): add declaration files for scripts/lib and scripts/e2e modules
* chore(types): add declaration files for top-level script modules (a-m)
* chore(types): add declaration files for top-level script modules (n-z)
* test: use a non-secret-shaped gateway token fixture
* test: type ci workflow guard helpers for the root test lane
* chore(tooling): typecheck root test/** with a dedicated tsgo lane
- test/tsconfig/tsconfig.test.root.json: root-test program (strict unused checks,
fixtures excluded; two Docker E2E clients that import built dist/** stay out,
same rationale as the scripts/e2e exclusion in tsconfig.scripts.json)
- tsgo:test:root wired into tsgo:test, check:test-types, scripts/check.mjs, and
the ci.yml test-types shard, mirroring the tsgo:scripts lane (#104348)
- changed-lane routing: test/**/*.ts (excluding fixtures) and the lane tsconfig
now trigger 'typecheck test root' in check:changed; previously test/ paths ran
lint only, so harness type errors surfaced first in CI (#104287 envDir case)
- burn down all 1071 latent type errors in the program: precise param/local
types across test/scripts, test/vitest, test/e2e, and transitive scripts/e2e
program members; 205 sibling .d.mts declaration files for imported .mjs
modules (committed separately); zero any, zero ts-expect-error
- resolve the pre-existing testing star-export ambiguity in
scripts/e2e/parallels/common.ts with an explicit re-export
Closes #104388
* chore(types): correct declaration fidelity per structured review
- re-derive 51 .d.mts files from implementation data flow instead of
initializers: fix a wrong never return (runTestProjectsDelegation returns
the child), add encoding-sensitive exec/spawn overloads (plain-gh), restore
the full release profile union, make parsed paths string | null, add missing
parseArgs fields via help/non-help unions, add a missing sibling declaration
(budget-number-args), drop 15 unused lint directives
- precise install-record/tuple typing removes the type-aware oxlint
regressions the first declarations caused in scripts/e2e implementations
- route .mts declaration edits under test/ to the testRoot lane and reference
the test-root project from tsconfig.projects.json so tsgo:all covers it
(closes both review findings against the lane wiring)
* chore(scripts): keep telegram runner dist typing structural for the boundary guard
* chore(types): declare runtime pack and gateway readiness exports added on main
* test: pin the importTargetPlan form of the plugin-contract plan import
The guard expectation still referenced the raw await import( form that
7ae5996bb3 (#103975) replaced with the importTargetPlan fallback helper;
the assertion fails on current main.
236 lines
6.0 KiB
TypeScript
236 lines
6.0 KiB
TypeScript
#!/usr/bin/env node
|
|
export function validateParentRunBinding(
|
|
parentView: unknown,
|
|
parentRest: unknown,
|
|
expectedRunId: unknown,
|
|
): unknown;
|
|
export function expectedChildDispatches(
|
|
parentRunId: unknown,
|
|
parentRunAttempt: unknown,
|
|
parentWorkflowRef: unknown,
|
|
): {
|
|
displayTitle: string;
|
|
headBranch: string;
|
|
manifestKey: string;
|
|
name: string;
|
|
parentJobName: string;
|
|
suffix: string;
|
|
trustedRef: string;
|
|
workflow: string;
|
|
}[];
|
|
export function requiredChildKeysForRerunGroup(rerunGroup: unknown): Set<string>;
|
|
export function expectedSelectedChildDispatches(
|
|
parentRunId: unknown,
|
|
parentRunAttempt: unknown,
|
|
parentWorkflowRef: unknown,
|
|
selectedKeys: unknown,
|
|
): {
|
|
displayTitle: string;
|
|
headBranch: string;
|
|
manifestKey: string;
|
|
name: string;
|
|
parentJobName: string;
|
|
suffix: string;
|
|
trustedRef: string;
|
|
workflow: string;
|
|
}[];
|
|
export function selectExactChildRun(
|
|
runs: unknown,
|
|
expectedDisplayTitle: unknown,
|
|
expectedHeadBranch: unknown,
|
|
): unknown;
|
|
export function selectExactChildRunFromPages(
|
|
runPages: unknown,
|
|
expectedDisplayTitle: unknown,
|
|
expectedHeadBranch: unknown,
|
|
): unknown;
|
|
export function validateParentManifest(
|
|
value: unknown,
|
|
expected: unknown,
|
|
): {
|
|
childRunIds: {
|
|
normalCi: string;
|
|
npmTelegram: string;
|
|
pluginPrerelease: string;
|
|
productPerformance: string;
|
|
releaseChecks: string;
|
|
};
|
|
controls: Record<string, unknown>;
|
|
evidenceReuse:
|
|
| {
|
|
changedPaths: string[];
|
|
evidenceSha: string;
|
|
policy: string;
|
|
runId: string;
|
|
selectedRunId: string;
|
|
}
|
|
| undefined;
|
|
releaseProfile: string;
|
|
rerunGroup: string;
|
|
runAttempt: number;
|
|
runId: string;
|
|
runReleaseSoak: string;
|
|
targetRef: string;
|
|
targetSha: string;
|
|
validationInputs: Record<string, unknown>;
|
|
version: unknown;
|
|
workflowFullRef: string | undefined;
|
|
workflowSha: string | undefined;
|
|
workflowRef: unknown;
|
|
workflowRefType: string | undefined;
|
|
};
|
|
export function validateEvidenceReuseChain(
|
|
currentManifest: unknown,
|
|
selectedManifest: unknown,
|
|
rootManifest: unknown,
|
|
): unknown;
|
|
export function selectedChildKeys(parentJobs: unknown): Set<string>;
|
|
export function manifestChildEntries<Child extends { manifestKey: string; name: string }>(
|
|
manifest: { childRunIds: Record<string, string> },
|
|
children: Child[],
|
|
selectedKeys: Set<string>,
|
|
): Array<{ child: Child; runId: string }>;
|
|
export function resolveManifestChildOriginAttempt(
|
|
run: unknown,
|
|
child: unknown,
|
|
parentManifest: unknown,
|
|
parentJobs: unknown,
|
|
): unknown;
|
|
export function selectManifestParentJob(
|
|
parentJobs: unknown,
|
|
child: unknown,
|
|
parentManifest: unknown,
|
|
originAttempt: unknown,
|
|
): unknown;
|
|
export function validateManifestChildRun(
|
|
run: unknown,
|
|
child: unknown,
|
|
runId: unknown,
|
|
parentManifest: unknown,
|
|
parentJobs: unknown,
|
|
selectedParentJobLog: unknown,
|
|
repository?: string,
|
|
): unknown;
|
|
export function validatePerformanceArtifactOnlyJobs(jobs: unknown, runAttempt: unknown): unknown;
|
|
export function validateManifestArtifactIdentity(
|
|
artifact: unknown,
|
|
{
|
|
artifactDigest,
|
|
artifactId,
|
|
runAttempt,
|
|
runId,
|
|
}: {
|
|
artifactDigest: unknown;
|
|
artifactId: unknown;
|
|
runAttempt: unknown;
|
|
runId: unknown;
|
|
},
|
|
): unknown;
|
|
export function selectManifestArtifact(
|
|
artifacts: unknown,
|
|
runId: unknown,
|
|
runAttempt: unknown,
|
|
): unknown;
|
|
export function validateManifestArtifactCompatibility(
|
|
artifact: unknown,
|
|
manifest: unknown,
|
|
runId: unknown,
|
|
runAttempt: unknown,
|
|
): unknown;
|
|
export function readManifestArtifactArchive(archivePath: unknown, expectedDigest: unknown): unknown;
|
|
export function createReleaseEvidenceClient(repository?: string): {
|
|
compareCommits(base: unknown, head: unknown): unknown;
|
|
getJobLog(jobId: unknown): string;
|
|
getParentJobs(runId: unknown): unknown[];
|
|
getRun(runId: unknown): unknown;
|
|
getRunView(runId: unknown): unknown;
|
|
loadManifest(
|
|
runId: unknown,
|
|
runAttempt: unknown,
|
|
manifestPath: unknown,
|
|
):
|
|
| {
|
|
artifact: unknown;
|
|
manifest: unknown;
|
|
}
|
|
| undefined;
|
|
};
|
|
export function validateTrustedProducerIdentity(
|
|
evidence: unknown,
|
|
client: unknown,
|
|
verifier: unknown,
|
|
trustedWorkflowRef: unknown,
|
|
): {
|
|
producerOnTrustedMainLineage: boolean;
|
|
workflowFullRef: string;
|
|
workflowQualifiedPath: string;
|
|
workflowRefProof: string;
|
|
workflowRefType: string;
|
|
workflowRunPath: string;
|
|
};
|
|
export function resolveVerifierIdentity(
|
|
sourceSha: unknown,
|
|
verifierSourceContent: unknown,
|
|
repositoryRoot?: string,
|
|
): {
|
|
schemaVersion: number;
|
|
script: string;
|
|
scriptSha256: string;
|
|
sourceSha: unknown;
|
|
};
|
|
export type ReleaseRunEvidence = {
|
|
children: Array<Record<string, unknown>>;
|
|
directRoot: boolean;
|
|
evidenceReuse: Record<string, unknown> | null;
|
|
producerOnTrustedMainLineage: boolean;
|
|
releaseProfile: string;
|
|
repository: string;
|
|
rerunGroup: string;
|
|
root: Record<string, unknown> & {
|
|
artifact: Record<string, unknown>;
|
|
targetSha: string;
|
|
workflowSha: string;
|
|
};
|
|
runReleaseSoak: boolean;
|
|
schema: string;
|
|
trustedWorkflowFullRef: string;
|
|
trustedWorkflowRef: string;
|
|
valid: boolean;
|
|
verifier: { schemaVersion: number; sourceSha: string };
|
|
};
|
|
export function validateReleaseRunEvidence(
|
|
{
|
|
manifestPath,
|
|
repository,
|
|
runId,
|
|
trustedWorkflowRef,
|
|
verifierSourceContent,
|
|
verifierSourceSha,
|
|
}: {
|
|
manifestPath?: string;
|
|
repository?: string | undefined;
|
|
runId: string;
|
|
trustedWorkflowRef?: string | undefined;
|
|
verifierSourceContent?: string | Uint8Array;
|
|
verifierSourceSha: string;
|
|
},
|
|
client?: unknown,
|
|
): ReleaseRunEvidence;
|
|
export function parseReleaseCiSummaryArgs(argv: string[]): {
|
|
intervalMs: number;
|
|
json: boolean;
|
|
manifestPath: string | undefined;
|
|
repository: string;
|
|
runId: string;
|
|
trustedWorkflowRef: string;
|
|
validate: boolean;
|
|
verifierSourceFile: string | undefined;
|
|
verifierSourceSha: string | undefined;
|
|
watch: boolean;
|
|
};
|
|
export function releaseCiWatchFingerprint(parent: unknown): string;
|
|
export function watchReleaseCiRun(
|
|
options: unknown,
|
|
overrides?: Record<string, unknown>,
|
|
): Promise<void>;
|