chore: import upstream snapshot with attribution

2026-07-13 13:12:33 +08:00
commit aacb60a4af
3387 changed files with 981307 additions and 0 deletions
@@ -0,0 +1,94 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+base_ref="${PR_BASE_REF:-${BASE_REF:-${BASE:-}}}"
+event_path="${GITHUB_EVENT_PATH:-}"
+
+if [[ -z "${base_ref}" ]]; then
+  {
+    echo "::error title=Missing PR target::PR_BASE_REF is required."
+    echo "Unable to validate the pull request target branch."
+  } >&2
+  exit 1
+fi
+
+if [[ "${base_ref}" == "main" ]]; then
+  echo "Pull request targets main."
+  exit 0
+fi
+
+event_label_names() {
+  if [[ -n "${PR_LABELS:-}" ]]; then
+    tr ',' '\n' <<< "${PR_LABELS}"
+    return
+  fi
+
+  if [[ -z "${event_path}" || ! -f "${event_path}" ]]; then
+    return
+  fi
+
+  local python_bin=""
+  if command -v python3 >/dev/null 2>&1; then
+    python_bin="python3"
+  elif command -v python >/dev/null 2>&1; then
+    python_bin="python"
+  fi
+
+  if [[ -n "${python_bin}" ]]; then
+    "${python_bin}" - "${event_path}" <<'PY'
+import json
+import sys
+
+with open(sys.argv[1], encoding="utf-8") as event_file:
+    event = json.load(event_file)
+
+for label in event.get("pull_request", {}).get("labels", []):
+    name = label.get("name")
+    if name:
+        print(name)
+PY
+    return
+  fi
+
+  if command -v jq >/dev/null 2>&1; then
+    jq -r '.pull_request.labels[]?.name // empty' "${event_path}"
+  fi
+}
+
+has_allowed_label() {
+  local allowed_kind="${1:?allowed kind is required}"
+  local label
+
+  while IFS= read -r label; do
+    case "${allowed_kind}:${label}" in
+      staging:maintainer-staging | staging:collaboration)
+        return 0
+        ;;
+    esac
+  done < <(event_label_names)
+
+  return 1
+}
+
+is_staging_branch() {
+  case "${base_ref}" in
+    sandbox-* | integration/* | staging/* | release/* | hotfix/*)
+      return 0
+      ;;
+  esac
+
+  return 1
+}
+
+if is_staging_branch || has_allowed_label staging; then
+  echo "Pull request targets a staging/collaboration branch."
+  echo "This is not a final integration path; final integration should target main."
+  exit 0
+fi
+
+{
+  echo "::error title=Wrong PR target::Ordinary pull requests should target main."
+  echo "Use sandbox-*, integration/*, staging/*, release/*, hotfix/*, or a maintainer-staging/collaboration label for maintainer collaboration PRs."
+  echo "Retarget this pull request to main or an approved staging/collaboration branch."
+} >&2
+exit 1