Files
wehub-resource-sync f9447f8e5f
CI / typecheck · build · test · bundle-size (push) Failing after 1s
CI / clean-room dependency closure smoke (push) Failing after 1s
CI / server-runtime e2e (docker · pg + valkey) (push) Failing after 2s
Deploy Install Scripts / deploy (push) Failing after 2s
Windows / build (push) Has been cancelled
chore: import upstream snapshot with attribution
2026-07-13 12:07:03 +08:00

72 lines
2.3 KiB
JavaScript

#!/usr/bin/env node
// Generates plugin/bun.lock as a build artifact from the GENERATED
// plugin/package.json (written by scripts/build-hooks.js). Shipping this
// lockfile lets the runtime installer (src/npx-cli/install/setup-runtime.ts)
// run `bun install --frozen-lockfile --ignore-scripts` for a deterministic
// dependency closure. See plan-10 (Build Artifact Hygiene, Approach A).
//
// MUST run AFTER build-hooks.js. Uses --ignore-scripts so generating the
// lockfile never triggers tree-sitter postinstall builds.
const { execSync } = require('child_process');
const { existsSync } = require('fs');
const path = require('path');
const rootDir = path.join(__dirname, '..');
const pluginDir = path.join(rootDir, 'plugin');
const pluginManifest = path.join(pluginDir, 'package.json');
console.log('\n🔒 Generating plugin/bun.lock...');
if (!existsSync(pluginManifest)) {
throw new Error(
`gen-plugin-lockfile: no package.json at ${pluginManifest}. ` +
`Run scripts/build-hooks.js first (it generates plugin/package.json).`
);
}
const lockfile = path.join(pluginDir, 'bun.lock');
// bun is the only tool that can regenerate the lockfile. On hosts that build
// without bun on PATH (e.g. the Windows build CI job), regeneration is skipped:
// the committed lockfile is already the deterministic closure, so a missing bun
// is non-fatal AS LONG AS the lockfile is present. With neither, we cannot
// produce the closure and must fail loud.
function bunAvailable() {
try {
execSync('bun --version', { stdio: 'ignore' });
return true;
} catch {
return false;
}
}
if (!bunAvailable()) {
if (existsSync(lockfile)) {
console.log('⚠️ bun not found on PATH — skipping regeneration; using committed plugin/bun.lock.');
process.exit(0);
}
throw new Error(
`gen-plugin-lockfile: bun is not on PATH and no committed lockfile exists at ${lockfile}. ` +
`Install bun (https://bun.sh) so the deterministic dependency closure can be generated.`
);
}
try {
execSync('bun install --ignore-scripts', {
cwd: pluginDir,
stdio: 'inherit',
});
} catch (error) {
throw new Error(`bun install failed in ${pluginDir}\n${error.message}`);
}
if (!existsSync(lockfile)) {
throw new Error(
`gen-plugin-lockfile: bun install completed but ${lockfile} was not produced.`
);
}
console.log('✓ plugin/bun.lock generated');