58 lines
3.6 KiB
Bash
Executable File
58 lines
3.6 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Test: promote.sh extracts a tag's tree into the public repo working dir (excluding .git + .github,
|
|
# and anything marked `export-ignore` in .gitattributes — internal docs), keeps CHANGELOG.md public,
|
|
# commits "Release <tag>" and creates the tag. The public repo's own .git is preserved.
|
|
set -euo pipefail
|
|
here="$(cd "$(dirname "$0")" && pwd)"
|
|
work="$(mktemp -d)"; trap 'rm -rf "$work"' EXIT
|
|
export GIT_AUTHOR_NAME=t GIT_AUTHOR_EMAIL=t@t GIT_COMMITTER_NAME=t GIT_COMMITTER_EMAIL=t@t
|
|
|
|
# source repo with a tag, a .github dir, an .env.example, a public CHANGELOG.md, and internal files
|
|
# that .gitattributes marks export-ignore (must NOT reach the public repo).
|
|
git init -q "$work/src"
|
|
mkdir -p "$work/src/.github/workflows" "$work/src/docs/superpowers"
|
|
printf 'app\n' > "$work/src/app.txt"
|
|
printf 'CLUSEV_REPOSITORY=\n' > "$work/src/.env.example"
|
|
printf 'name: ci\n' > "$work/src/.github/workflows/ci.yml"
|
|
printf '# Changelog\n' > "$work/src/CHANGELOG.md"
|
|
printf '/CLAUDE.md export-ignore\n/docs export-ignore\n' > "$work/src/.gitattributes"
|
|
printf 'internal\n' > "$work/src/CLAUDE.md"
|
|
printf 'internal spec\n' > "$work/src/docs/superpowers/spec.md"
|
|
git -C "$work/src" add -A && git -C "$work/src" commit -qm init && git -C "$work/src" tag v1.0.0
|
|
|
|
# empty public repo (its own history)
|
|
git init -q "$work/pub"
|
|
|
|
bash "$here/promote.sh" "$work/src" v1.0.0 "$work/pub" "Release v1.0.0"
|
|
|
|
test -f "$work/pub/app.txt" || { echo "FAIL: tree not copied"; exit 1; }
|
|
test -f "$work/pub/.env.example" || { echo "FAIL: .env.example missing"; exit 1; }
|
|
test -f "$work/pub/CHANGELOG.md" || { echo "FAIL: CHANGELOG.md must stay public (Versions page fetches it)"; exit 1; }
|
|
test ! -d "$work/pub/.github" || { echo "FAIL: .github leaked to public"; exit 1; }
|
|
test ! -f "$work/pub/CLAUDE.md" || { echo "FAIL: internal CLAUDE.md leaked to public"; exit 1; }
|
|
test ! -d "$work/pub/docs" || { echo "FAIL: internal docs/ leaked to public"; exit 1; }
|
|
test -d "$work/pub/.git" || { echo "FAIL: public .git clobbered"; exit 1; }
|
|
git -C "$work/pub" rev-parse v1.0.0 >/dev/null 2>&1 || { echo "FAIL: tag missing"; exit 1; }
|
|
git -C "$work/pub" log -1 --pretty=%s | grep -qx 'Release v1.0.0' || { echo "FAIL: commit message"; exit 1; }
|
|
|
|
# Beta -> stable: stable re-tags the SAME source commit, so the extracted tree is byte-identical
|
|
# to the last promotion. Promote a second tag (same tree) into the SAME pub repo and assert it
|
|
# still creates the tag — guards against `git commit` aborting on "nothing to commit".
|
|
git -C "$work/src" tag v1.0.1 v1.0.0
|
|
bash "$here/promote.sh" "$work/src" v1.0.1 "$work/pub" "Release v1.0.1"
|
|
git -C "$work/pub" rev-parse v1.0.1 >/dev/null 2>&1 || { echo "FAIL: identical-tree tag missing"; exit 1; }
|
|
git -C "$work/pub" log -1 --pretty=%s | grep -qx 'Release v1.0.1' || { echo "FAIL: identical-tree commit message"; exit 1; }
|
|
|
|
# Leak guard: a tree that still carries an internal-only doc (i.e. a tag cut before the
|
|
# export-ignore fixes) must be REFUSED, with no tag created.
|
|
git init -q "$work/leaky"
|
|
printf 'app\n' > "$work/leaky/app.txt"
|
|
printf 'internal notes\n' > "$work/leaky/CLAUDE.md" # present (not export-ignored here) -> pre-fix tree
|
|
git -C "$work/leaky" add -A && git -C "$work/leaky" commit -qm init && git -C "$work/leaky" tag v9.9.9
|
|
git init -q "$work/pub2"
|
|
if bash "$here/promote.sh" "$work/leaky" v9.9.9 "$work/pub2" "Release v9.9.9" 2>/dev/null; then
|
|
echo "FAIL: leak guard did not refuse a tree carrying an internal doc"; exit 1
|
|
fi
|
|
git -C "$work/pub2" rev-parse v9.9.9 >/dev/null 2>&1 && { echo "FAIL: tag created despite leak guard"; exit 1; }
|
|
echo "PASS"
|