mirror of
https://github.com/lahfir/agent-desktop.git
synced 2026-07-26 17:12:15 +00:00
66 lines
2.3 KiB
JavaScript
66 lines
2.3 KiB
JavaScript
#!/usr/bin/env node
|
|
|
|
const { execFileSync } = require('child_process');
|
|
const { readFileSync } = require('fs');
|
|
const { join } = require('path');
|
|
|
|
const root = join(__dirname, '..');
|
|
const npmDir = join(root, 'npm');
|
|
const pkg = require(join(npmDir, 'package.json'));
|
|
const releaseWorkflow = readFileSync(join(root, '.github/workflows/release.yml'), 'utf8');
|
|
const expectedFiles = [
|
|
'bin/agent-desktop.js',
|
|
'package.json',
|
|
'scripts/postinstall.js',
|
|
];
|
|
|
|
if (pkg.bin?.['agent-desktop'] !== 'bin/agent-desktop.js') {
|
|
throw new Error('npm bin path must be bin/agent-desktop.js');
|
|
}
|
|
|
|
if (pkg.repository?.url !== 'git+https://github.com/lahfir/agent-desktop.git') {
|
|
throw new Error('npm repository URL must be normalized for npm publish');
|
|
}
|
|
|
|
if (releaseWorkflow.includes('secrets.NPM_TOKEN') || releaseWorkflow.includes('NODE_AUTH_TOKEN')) {
|
|
throw new Error('release workflow must use npm trusted publishing, not long-lived npm tokens');
|
|
}
|
|
|
|
if (!releaseWorkflow.includes('id-token: write')) {
|
|
throw new Error('release workflow must grant id-token: write for npm trusted publishing');
|
|
}
|
|
|
|
if (!releaseWorkflow.includes('package-manager-cache: false')) {
|
|
throw new Error('release workflow must disable package manager caching for npm publishing');
|
|
}
|
|
|
|
if (!releaseWorkflow.includes('npm publish --access public')) {
|
|
throw new Error('release workflow must publish npm through the trusted-publishing command');
|
|
}
|
|
|
|
const output = execFileSync('npm', ['pack', '--dry-run', '--json'], {
|
|
cwd: npmDir,
|
|
encoding: 'utf8',
|
|
env: {
|
|
...process.env,
|
|
npm_config_cache: process.env.npm_config_cache || '/tmp/agent-desktop-npm-cache',
|
|
},
|
|
});
|
|
|
|
const pack = JSON.parse(output)[0];
|
|
const actualFiles = pack.files.map((file) => file.path).sort();
|
|
const expected = [...expectedFiles].sort();
|
|
|
|
if (JSON.stringify(actualFiles) !== JSON.stringify(expected)) {
|
|
throw new Error(`Unexpected npm package contents: ${actualFiles.join(', ')}`);
|
|
}
|
|
|
|
if (pack.bundled && pack.bundled.length > 0) {
|
|
throw new Error(`npm package unexpectedly bundles dependencies: ${pack.bundled.join(', ')}`);
|
|
}
|
|
|
|
if (pack.unpackedSize > 25_000) {
|
|
throw new Error(`npm package is unexpectedly large: ${pack.unpackedSize} bytes`);
|
|
}
|
|
|
|
console.log(`OK: npm package contains ${actualFiles.length} files, ${pack.unpackedSize} bytes unpacked`);
|