Files
openclaw/scripts/generate-dependency-release-evidence.d.mts
Peter Steinberger fe261b0f59 chore(tooling): typecheck root test/** with a dedicated tsgo lane (#104475)
* chore(types): add declaration files for scripts/lib and scripts/e2e modules

* chore(types): add declaration files for top-level script modules (a-m)

* chore(types): add declaration files for top-level script modules (n-z)

* test: use a non-secret-shaped gateway token fixture

* test: type ci workflow guard helpers for the root test lane

* chore(tooling): typecheck root test/** with a dedicated tsgo lane

- test/tsconfig/tsconfig.test.root.json: root-test program (strict unused checks,
  fixtures excluded; two Docker E2E clients that import built dist/** stay out,
  same rationale as the scripts/e2e exclusion in tsconfig.scripts.json)
- tsgo:test:root wired into tsgo:test, check:test-types, scripts/check.mjs, and
  the ci.yml test-types shard, mirroring the tsgo:scripts lane (#104348)
- changed-lane routing: test/**/*.ts (excluding fixtures) and the lane tsconfig
  now trigger 'typecheck test root' in check:changed; previously test/ paths ran
  lint only, so harness type errors surfaced first in CI (#104287 envDir case)
- burn down all 1071 latent type errors in the program: precise param/local
  types across test/scripts, test/vitest, test/e2e, and transitive scripts/e2e
  program members; 205 sibling .d.mts declaration files for imported .mjs
  modules (committed separately); zero any, zero ts-expect-error
- resolve the pre-existing testing star-export ambiguity in
  scripts/e2e/parallels/common.ts with an explicit re-export

Closes #104388

* chore(types): correct declaration fidelity per structured review

- re-derive 51 .d.mts files from implementation data flow instead of
  initializers: fix a wrong never return (runTestProjectsDelegation returns
  the child), add encoding-sensitive exec/spawn overloads (plain-gh), restore
  the full release profile union, make parsed paths string | null, add missing
  parseArgs fields via help/non-help unions, add a missing sibling declaration
  (budget-number-args), drop 15 unused lint directives
- precise install-record/tuple typing removes the type-aware oxlint
  regressions the first declarations caused in scripts/e2e implementations
- route .mts declaration edits under test/ to the testRoot lane and reference
  the test-root project from tsconfig.projects.json so tsgo:all covers it
  (closes both review findings against the lane wiring)

* chore(scripts): keep telegram runner dist typing structural for the boundary guard

* chore(types): declare runtime pack and gateway readiness exports added on main

* test: pin the importTargetPlan form of the plugin-contract plan import

The guard expectation still referenced the raw await import( form that
7ae5996bb3 (#103975) replaced with the importTargetPlan fallback helper;
the assertion fails on current main.
2026-07-11 06:15:41 -07:00

134 lines
3.2 KiB
TypeScript

#!/usr/bin/env node
/**
* Resolves the release tag when the release ref is a SHA or tag.
*/
export function resolveReleaseTag({
releaseRef,
packageVersion,
}: {
releaseRef: unknown;
packageVersion: unknown;
}): unknown;
/**
* Resolves the previous reachable release tag for dependency diffs.
*/
export function resolvePreviousReleaseTag({
rootDir,
execFileSyncImpl,
fetchOnMiss,
}?: {
rootDir?: string | undefined;
execFileSyncImpl?: ((command: string, args?: string[]) => string) | undefined;
fetchOnMiss?: boolean | undefined;
}): string;
/**
* Creates the dependency evidence manifest payload.
*/
export function createDependencyEvidenceManifest({
generatedAt,
releaseTag,
releaseRef,
releaseSha,
npmDistTag,
packageVersion,
workflowRunId,
workflowRunAttempt,
dependencyChangeBaseRef,
}?: {
generatedAt?: string | undefined;
releaseTag?: string;
releaseRef?: string;
releaseSha?: string;
npmDistTag?: string;
packageVersion?: string;
dependencyChangeBaseRef?: string;
workflowRunId?: string | undefined;
workflowRunAttempt?: string | undefined;
}): {
schemaVersion: number;
generatedAt: string;
releaseTag: unknown;
releaseRef: unknown;
releaseSha: unknown;
npmDistTag: unknown;
packageName: string;
packageVersion: unknown;
workflowRunId: string;
workflowRunAttempt: string;
dependencyChangeBaseRef: unknown;
reports: {
name: string;
command: string;
policy: string;
json: string;
markdown: string;
}[];
};
/**
* Reads generated reports and collects summary counts.
*/
export function collectDependencyEvidenceSummaryCounts(evidenceDir: unknown): Promise<{
vulnerabilityBlockers: unknown;
vulnerabilityFindings: unknown;
transitiveRiskSignals: unknown;
workspaceExcludedTransitiveSignals: unknown;
transitiveMetadataFailures: unknown;
ownershipLockfilePackages: unknown;
ownershipBuildRiskPackages: unknown;
dependencyFileChanges: unknown;
dependencyAddedPackages: unknown;
dependencyRemovedPackages: unknown;
dependencyChangedPackages: unknown;
}>;
/**
* Renders the dependency evidence Markdown summary.
*/
export function renderDependencyEvidenceSummary({
releaseTag,
releaseSha,
baseRef,
counts,
}: {
releaseTag: unknown;
releaseSha: unknown;
baseRef: unknown;
counts: unknown;
}): string;
/**
* Renders the GitHub Actions step summary for dependency evidence.
*/
export function renderDependencyEvidenceStepSummary({
evidenceArtifactName,
baseRef,
counts,
}: {
evidenceArtifactName: unknown;
baseRef: unknown;
counts: unknown;
}): string;
export function parseArgs(argv: string[]): {
help?: true;
rootDir: string;
outputDir: string | null;
releaseRef: string | null;
npmDistTag: string | null;
baseRef: string | null;
githubOutput: string | undefined;
githubStepSummary: string | undefined;
};
/**
* Runs the dependency release evidence generator CLI.
*/
export function main(argv?: string[]): Promise<number>;
/**
* Dependency evidence reports generated for release artifacts.
*/
export const DEPENDENCY_EVIDENCE_REPORTS: {
name: string;
command: string;
policy: string;
json: string;
markdown: string;
}[];
import { execFileSync } from "node:child_process";