feat: record WP7-01 release candidate environment

2026-08-04 13:24:35 +08:00
parent c601c848f5
commit 623cad25b2
5 changed files with 372 additions and 2 deletions
@@ -0,0 +1,78 @@
+import { spawnSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+
+import { createReleaseCandidate } from "./lib/release-candidate.mjs";
+
+const runId = process.env.DADA_TDD_RUN_ID ?? `wp7-01-candidate-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
+const runDirectory = resolve("artifacts", "tdd", runId);
+if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
+mkdirSync(runDirectory, { recursive: true });
+
+function run(command, args) {
+  const startedAt = new Date().toISOString();
+  const executable = process.platform === "win32" ? (process.env.ComSpec ?? "cmd.exe") : command;
+  const actualArgs = process.platform === "win32" ? ["/d", "/s", "/c", [command, ...args].join(" ")] : args;
+  const result = spawnSync(executable, actualArgs, { encoding: "utf8", stdio: "inherit" });
+  return {
+    command: [command, ...args].join(" "),
+    exit_code: result.status ?? 1,
+    finished_at: new Date().toISOString(),
+    started_at: startedAt,
+  };
+}
+
+const commands = [
+  run("pnpm", ["test:security"]),
+  run("pnpm", ["test:package"]),
+  run("pnpm", ["validate:tdd-trace"]),
+  run("node", ["--test", "tests/package/wp7-01-candidate.test.mjs"]),
+];
+const failed = commands.filter(({ exit_code }) => exit_code !== 0);
+let candidate;
+if (failed.length === 0) {
+  const commit = spawnSync("git", ["rev-parse", "HEAD"], { encoding: "utf8" }).stdout.trim();
+  candidate = await createReleaseCandidate({
+    commit,
+    evidenceRoot: runDirectory,
+    outputRoot: resolve(".build", runId),
+  });
+}
+
+writeFileSync(resolve(runDirectory, "commands.json"), `${JSON.stringify({ commands, run_id: runId, schema_version: "1.0" }, null, 2)}\n`);
+const recordPath = resolve(runDirectory, "release-candidate.json");
+const missingEvidence = [
+  "release-candidate.json",
+  "candidate-package/START-HERE.txt",
+  "candidate-package/package-manifest.json",
+  "candidate-package/package-scan.json",
+  "candidate-package/process-tree.json",
+  ...(candidate ? [`candidate-package/${candidate.record.candidate_package.file_name}`] : []),
+].filter((path) => !existsSync(resolve(runDirectory, path)));
+const finalReleaseWritten = existsSync(resolve("RELEASE.json"));
+const status = failed.length === 0 && missingEvidence.length === 0 && !finalReleaseWritten ? "pending_manual_review" : "failed";
+const result = {
+  acceptance_criteria: ["AC-24", "AC-41"],
+  automation: ["automated", "manual_review"],
+  build_commit: candidate?.record.build_commit ?? null,
+  candidate_status: candidate?.record.status ?? null,
+  final_release_written: finalReleaseWritten,
+  finished_at: new Date().toISOString(),
+  fixed_port: candidate?.record.fixed_port ?? null,
+  manifest: {
+    path: "tasks.manifest.json",
+    sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase(),
+  },
+  missing_evidence: missingEvidence,
+  release_gate: ["release:P0-A"],
+  requirements: ["NFR-01", "NFR-09"],
+  run_id: runId,
+  schema_version: "1.0",
+  status,
+  task_id: "TASK-WP7-01",
+  work_package: "WP-7",
+};
+writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify(result, null, 2)}\n`);
+console.log(JSON.stringify(result, null, 2));
+if (status === "failed") process.exit(1);