Files
openclaw/scripts/release-ci-summary.d.mts
Peter Steinberger fe261b0f59 chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)
* chore(types): add declaration files for scripts/lib and scripts/e2e modules

* chore(types): add declaration files for top-level script modules (a-m)

* chore(types): add declaration files for top-level script modules (n-z)

* test: use a non-secret-shaped gateway token fixture

* test: type ci workflow guard helpers for the root test lane

* chore(tooling): typecheck root test/** with a dedicated tsgo lane

- test/tsconfig/tsconfig.test.root.json: root-test program (strict unused checks,
  fixtures excluded; two Docker E2E clients that import built dist/** stay out,
  same rationale as the scripts/e2e exclusion in tsconfig.scripts.json)
- tsgo:test:root wired into tsgo:test, check:test-types, scripts/check.mjs, and
  the ci.yml test-types shard, mirroring the tsgo:scripts lane (#104348)
- changed-lane routing: test/**/*.ts (excluding fixtures) and the lane tsconfig
  now trigger 'typecheck test root' in check:changed; previously test/ paths ran
  lint only, so harness type errors surfaced first in CI (#104287 envDir case)
- burn down all 1071 latent type errors in the program: precise param/local
  types across test/scripts, test/vitest, test/e2e, and transitive scripts/e2e
  program members; 205 sibling .d.mts declaration files for imported .mjs
  modules (committed separately); zero any, zero ts-expect-error
- resolve the pre-existing testing star-export ambiguity in
  scripts/e2e/parallels/common.ts with an explicit re-export

Closes #104388

* chore(types): correct declaration fidelity per structured review

- re-derive 51 .d.mts files from implementation data flow instead of
  initializers: fix a wrong never return (runTestProjectsDelegation returns
  the child), add encoding-sensitive exec/spawn overloads (plain-gh), restore
  the full release profile union, make parsed paths string | null, add missing
  parseArgs fields via help/non-help unions, add a missing sibling declaration
  (budget-number-args), drop 15 unused lint directives
- precise install-record/tuple typing removes the type-aware oxlint
  regressions the first declarations caused in scripts/e2e implementations
- route .mts declaration edits under test/ to the testRoot lane and reference
  the test-root project from tsconfig.projects.json so tsgo:all covers it
  (closes both review findings against the lane wiring)

* chore(scripts): keep telegram runner dist typing structural for the boundary guard

* chore(types): declare runtime pack and gateway readiness exports added on main

* test: pin the importTargetPlan form of the plugin-contract plan import

The guard expectation still referenced the raw await import( form that
7ae5996bb3 (#103975) replaced with the importTargetPlan fallback helper;
the assertion fails on current main.
2026-07-11 06:15:41 -07:00

236 lines
6.0 KiB
TypeScript

#!/usr/bin/env node
export function validateParentRunBinding(
parentView: unknown,
parentRest: unknown,
expectedRunId: unknown,
): unknown;
export function expectedChildDispatches(
parentRunId: unknown,
parentRunAttempt: unknown,
parentWorkflowRef: unknown,
): {
displayTitle: string;
headBranch: string;
manifestKey: string;
name: string;
parentJobName: string;
suffix: string;
trustedRef: string;
workflow: string;
}[];
export function requiredChildKeysForRerunGroup(rerunGroup: unknown): Set<string>;
export function expectedSelectedChildDispatches(
parentRunId: unknown,
parentRunAttempt: unknown,
parentWorkflowRef: unknown,
selectedKeys: unknown,
): {
displayTitle: string;
headBranch: string;
manifestKey: string;
name: string;
parentJobName: string;
suffix: string;
trustedRef: string;
workflow: string;
}[];
export function selectExactChildRun(
runs: unknown,
expectedDisplayTitle: unknown,
expectedHeadBranch: unknown,
): unknown;
export function selectExactChildRunFromPages(
runPages: unknown,
expectedDisplayTitle: unknown,
expectedHeadBranch: unknown,
): unknown;
export function validateParentManifest(
value: unknown,
expected: unknown,
): {
childRunIds: {
normalCi: string;
npmTelegram: string;
pluginPrerelease: string;
productPerformance: string;
releaseChecks: string;
};
controls: Record<string, unknown>;
evidenceReuse:
| {
changedPaths: string[];
evidenceSha: string;
policy: string;
runId: string;
selectedRunId: string;
}
| undefined;
releaseProfile: string;
rerunGroup: string;
runAttempt: number;
runId: string;
runReleaseSoak: string;
targetRef: string;
targetSha: string;
validationInputs: Record<string, unknown>;
version: unknown;
workflowFullRef: string | undefined;
workflowSha: string | undefined;
workflowRef: unknown;
workflowRefType: string | undefined;
};
export function validateEvidenceReuseChain(
currentManifest: unknown,
selectedManifest: unknown,
rootManifest: unknown,
): unknown;
export function selectedChildKeys(parentJobs: unknown): Set<string>;
export function manifestChildEntries<Child extends { manifestKey: string; name: string }>(
manifest: { childRunIds: Record<string, string> },
children: Child[],
selectedKeys: Set<string>,
): Array<{ child: Child; runId: string }>;
export function resolveManifestChildOriginAttempt(
run: unknown,
child: unknown,
parentManifest: unknown,
parentJobs: unknown,
): unknown;
export function selectManifestParentJob(
parentJobs: unknown,
child: unknown,
parentManifest: unknown,
originAttempt: unknown,
): unknown;
export function validateManifestChildRun(
run: unknown,
child: unknown,
runId: unknown,
parentManifest: unknown,
parentJobs: unknown,
selectedParentJobLog: unknown,
repository?: string,
): unknown;
export function validatePerformanceArtifactOnlyJobs(jobs: unknown, runAttempt: unknown): unknown;
export function validateManifestArtifactIdentity(
artifact: unknown,
{
artifactDigest,
artifactId,
runAttempt,
runId,
}: {
artifactDigest: unknown;
artifactId: unknown;
runAttempt: unknown;
runId: unknown;
},
): unknown;
export function selectManifestArtifact(
artifacts: unknown,
runId: unknown,
runAttempt: unknown,
): unknown;
export function validateManifestArtifactCompatibility(
artifact: unknown,
manifest: unknown,
runId: unknown,
runAttempt: unknown,
): unknown;
export function readManifestArtifactArchive(archivePath: unknown, expectedDigest: unknown): unknown;
export function createReleaseEvidenceClient(repository?: string): {
compareCommits(base: unknown, head: unknown): unknown;
getJobLog(jobId: unknown): string;
getParentJobs(runId: unknown): unknown[];
getRun(runId: unknown): unknown;
getRunView(runId: unknown): unknown;
loadManifest(
runId: unknown,
runAttempt: unknown,
manifestPath: unknown,
):
| {
artifact: unknown;
manifest: unknown;
}
| undefined;
};
export function validateTrustedProducerIdentity(
evidence: unknown,
client: unknown,
verifier: unknown,
trustedWorkflowRef: unknown,
): {
producerOnTrustedMainLineage: boolean;
workflowFullRef: string;
workflowQualifiedPath: string;
workflowRefProof: string;
workflowRefType: string;
workflowRunPath: string;
};
export function resolveVerifierIdentity(
sourceSha: unknown,
verifierSourceContent: unknown,
repositoryRoot?: string,
): {
schemaVersion: number;
script: string;
scriptSha256: string;
sourceSha: unknown;
};
export type ReleaseRunEvidence = {
children: Array<Record<string, unknown>>;
directRoot: boolean;
evidenceReuse: Record<string, unknown> | null;
producerOnTrustedMainLineage: boolean;
releaseProfile: string;
repository: string;
rerunGroup: string;
root: Record<string, unknown> & {
artifact: Record<string, unknown>;
targetSha: string;
workflowSha: string;
};
runReleaseSoak: boolean;
schema: string;
trustedWorkflowFullRef: string;
trustedWorkflowRef: string;
valid: boolean;
verifier: { schemaVersion: number; sourceSha: string };
};
export function validateReleaseRunEvidence(
{
manifestPath,
repository,
runId,
trustedWorkflowRef,
verifierSourceContent,
verifierSourceSha,
}: {
manifestPath?: string;
repository?: string | undefined;
runId: string;
trustedWorkflowRef?: string | undefined;
verifierSourceContent?: string | Uint8Array;
verifierSourceSha: string;
},
client?: unknown,
): ReleaseRunEvidence;
export function parseReleaseCiSummaryArgs(argv: string[]): {
intervalMs: number;
json: boolean;
manifestPath: string | undefined;
repository: string;
runId: string;
trustedWorkflowRef: string;
validate: boolean;
verifierSourceFile: string | undefined;
verifierSourceSha: string | undefined;
watch: boolean;
};
export function releaseCiWatchFingerprint(parent: unknown): string;
export function watchReleaseCiRun(
options: unknown,
overrides?: Record<string, unknown>,
): Promise<void>;