Release v0.1.7

scripts/generate-release-catalog.py

@@ -87,6 +87,7 @@ CATALOG_MODULES = (
         name="Policy",
         description="Policy and governance capability module.",
         tags=("official", "platform-module"),
+        webui_package="@govoplan/policy-webui",
     ),
     CatalogModule(
         module_id="audit",
@@ -95,6 +96,7 @@ CATALOG_MODULES = (
         name="Audit",
         description="Audit-log storage and audit administration routes.",
         tags=("official", "platform-module"),
+        webui_package="@govoplan/audit-webui",
     ),
     CatalogModule(
         module_id="dashboard",
@@ -303,6 +305,25 @@ def _manifest_catalog_metadata(manifest: ModuleManifest | None) -> dict[str, obj
     if manifest.migration_spec is not None:
         payload["migration_safety"] = "requires_review"
         payload["migration_notes"] = "Module owns database migrations; review release notes and migration output before activation."
+        if manifest.migration_spec.migration_after:
+            payload["migration_after"] = list(manifest.migration_spec.migration_after)
+        if manifest.migration_spec.migration_before:
+            payload["migration_before"] = list(manifest.migration_spec.migration_before)
+        if manifest.migration_spec.migration_tasks:
+            tasks: list[dict[str, object]] = []
+            for task in manifest.migration_spec.migration_tasks:
+                task_payload: dict[str, object] = {
+                    "task_id": task.task_id,
+                    "phase": task.phase,
+                    "summary": task.summary,
+                    "task_version": task.task_version,
+                    "safety": task.safety,
+                    "idempotent": task.idempotent,
+                }
+                if task.timeout_seconds is not None:
+                    task_payload["timeout_seconds"] = task.timeout_seconds
+                tasks.append(task_payload)
+            payload["migration_tasks"] = tasks
     if manifest.provides_interfaces:
         payload["provides_interfaces"] = [
             {"name": item.name, "version": item.version}

scripts/generate-release-lock.sh

@@ -28,6 +28,7 @@ fail() {
 ROOT="$(cd "$(dirname "${BASH_SOURCE[0]}")/.." && pwd)"
 WEBUI="$ROOT/webui"
 NPM_BIN="${NPM:-}"
+NODE_BIN="${NODE:-}"
 
 if [[ -z "$NPM_BIN" ]]; then
   if [[ -x "/home/zemion/.nvm/versions/node/v22.22.3/bin/npm" ]]; then
@@ -36,6 +37,13 @@ if [[ -z "$NPM_BIN" ]]; then
     NPM_BIN="npm"
   fi
 fi
+if [[ -z "$NODE_BIN" ]]; then
+  if [[ -x "$(dirname "$NPM_BIN")/node" ]]; then
+    NODE_BIN="$(dirname "$NPM_BIN")/node"
+  else
+    NODE_BIN="node"
+  fi
+fi
 
 while [[ $# -gt 0 ]]; do
   case "$1" in
@@ -58,6 +66,7 @@ done
 
 [[ -f "$WEBUI/package.release.json" ]] || fail "missing $WEBUI/package.release.json"
 command -v "$NPM_BIN" >/dev/null 2>&1 || fail "npm executable not found: $NPM_BIN"
+command -v "$NODE_BIN" >/dev/null 2>&1 || fail "node executable not found: $NODE_BIN"
 
 TMP_DIR="$(mktemp -d "${TMPDIR:-/tmp}/govoplan-release-lock.XXXXXXXX")"
 cleanup() {
@@ -75,6 +84,23 @@ echo "Temporary workspace: $TMP_DIR"
 (
   cd "$TMP_DIR"
   PATH="$(dirname "$NPM_BIN"):$PATH" "$NPM_BIN" install --package-lock-only --ignore-scripts
+  mapfile -t GIT_PACKAGES < <(
+    PATH="$(dirname "$NODE_BIN"):$PATH" "$NODE_BIN" <<'NODE'
+const fs = require("fs");
+const pkg = JSON.parse(fs.readFileSync("package.json", "utf8"));
+for (const group of ["dependencies", "devDependencies", "optionalDependencies"]) {
+  for (const [name, spec] of Object.entries(pkg[group] || {})) {
+    if (typeof spec === "string" && spec.startsWith("git+")) {
+      console.log(name);
+    }
+  }
+}
+NODE
+  )
+  if [[ "${#GIT_PACKAGES[@]}" -gt 0 ]]; then
+    echo "Refreshing git package lock entries: ${GIT_PACKAGES[*]}"
+    PATH="$(dirname "$NPM_BIN"):$PATH" "$NPM_BIN" update --package-lock-only --ignore-scripts "${GIT_PACKAGES[@]}"
+  fi
 )
 
 cp "$TMP_DIR/package-lock.json" "$WEBUI/package-lock.release.json"

scripts/push-release-tag.sh

@@ -92,19 +92,39 @@ PARENT="$(dirname "$ROOT")"
 PACKAGE_MODULE_REPOS=(
   "$PARENT/govoplan-access"
   "$PARENT/govoplan-admin"
-  "$PARENT/govoplan-tenancy"
-  "$PARENT/govoplan-organizations"
+  "$PARENT/govoplan-approvals"
+  "$PARENT/govoplan-assets"
+  "$PARENT/govoplan-audit"
+  "$PARENT/govoplan-booking"
+  "$PARENT/govoplan-calendar"
+  "$PARENT/govoplan-campaign"
+  "$PARENT/govoplan-certificates"
+  "$PARENT/govoplan-committee"
+  "$PARENT/govoplan-consultation"
+  "$PARENT/govoplan-contracts"
+  "$PARENT/govoplan-dashboard"
+  "$PARENT/govoplan-docs"
+  "$PARENT/govoplan-facilities"
+  "$PARENT/govoplan-files"
+  "$PARENT/govoplan-forms-runtime"
+  "$PARENT/govoplan-grants"
+  "$PARENT/govoplan-helpdesk"
   "$PARENT/govoplan-identity"
   "$PARENT/govoplan-idm"
-  "$PARENT/govoplan-policy"
-  "$PARENT/govoplan-audit"
-  "$PARENT/govoplan-dashboard"
-  "$PARENT/govoplan-files"
+  "$PARENT/govoplan-inspections"
+  "$PARENT/govoplan-issue-reporting"
+  "$PARENT/govoplan-learning"
   "$PARENT/govoplan-mail"
-  "$PARENT/govoplan-campaign"
-  "$PARENT/govoplan-calendar"
-  "$PARENT/govoplan-docs"
   "$PARENT/govoplan-ops"
+  "$PARENT/govoplan-organizations"
+  "$PARENT/govoplan-permits"
+  "$PARENT/govoplan-policy"
+  "$PARENT/govoplan-procurement"
+  "$PARENT/govoplan-records"
+  "$PARENT/govoplan-resources"
+  "$PARENT/govoplan-risk-compliance"
+  "$PARENT/govoplan-tenancy"
+  "$PARENT/govoplan-transparency"
 )
 TAG_ONLY_MODULE_REPOS=(
   "$PARENT/govoplan-addresses"
@@ -120,6 +140,7 @@ TAG_ONLY_MODULE_REPOS=(
   "$PARENT/govoplan-notifications"
   "$PARENT/govoplan-payments"
   "$PARENT/govoplan-portal"
+  "$PARENT/govoplan-postbox"
   "$PARENT/govoplan-reporting"
   "$PARENT/govoplan-scheduling"
   "$PARENT/govoplan-search"
@@ -173,6 +194,9 @@ if [[ -z "$NPM_BIN" ]]; then
   fi
 fi
 
+export GIT_SSH_COMMAND="${GIT_SSH_COMMAND:-ssh -o BatchMode=yes -o ConnectTimeout=15}"
+GIT_REMOTE_TIMEOUT="${GIT_REMOTE_TIMEOUT:-30}"
+
 normalize_bump() {
   local value="${1,,}"
   case "$value" in
@@ -282,56 +306,20 @@ update_manifest_version() {
   local repo="$1"
   local project_name="$2"
   local version="$3"
-  local manifest_path=""
+  local manifest_paths=()
 
-  case "$project_name" in
-    govoplan-core)
-      return 0
-      ;;
-    govoplan-access)
-      manifest_path="$repo/src/govoplan_access/backend/manifest.py"
-      ;;
-    govoplan-admin)
-      manifest_path="$repo/src/govoplan_admin/backend/manifest.py"
-      ;;
-    govoplan-tenancy)
-      manifest_path="$repo/src/govoplan_tenancy/backend/manifest.py"
-      ;;
-    govoplan-organizations)
-      manifest_path="$repo/src/govoplan_organizations/backend/manifest.py"
-      ;;
-    govoplan-identity)
-      manifest_path="$repo/src/govoplan_identity/backend/manifest.py"
-      ;;
-    govoplan-idm)
-      manifest_path="$repo/src/govoplan_idm/backend/manifest.py"
-      ;;
-    govoplan-policy)
-      manifest_path="$repo/src/govoplan_policy/backend/manifest.py"
-      ;;
-    govoplan-audit)
-      manifest_path="$repo/src/govoplan_audit/backend/manifest.py"
-      ;;
-    govoplan-files)
-      manifest_path="$repo/src/govoplan_files/backend/manifest.py"
-      ;;
-    govoplan-mail)
-      manifest_path="$repo/src/govoplan_mail/backend/manifest.py"
-      ;;
-    govoplan-campaign)
-      manifest_path="$repo/src/govoplan_campaign/backend/manifest.py"
-      ;;
-    govoplan-calendar)
-      manifest_path="$repo/src/govoplan_calendar/backend/manifest.py"
-      ;;
-    *)
-      fail "unknown project for manifest version update: $project_name"
-      ;;
-  esac
+  if [[ "$project_name" == "govoplan-core" ]]; then
+    return 0
+  fi
 
-  [[ -f "$manifest_path" ]] || fail "missing module manifest: $manifest_path"
+  while IFS= read -r -d '' manifest_path; do
+    manifest_paths+=("$manifest_path")
+  done < <(find "$repo/src" -path "*/backend/manifest.py" -print0 2>/dev/null)
 
-  "$PYTHON" - "$manifest_path" "$version" <<'PYCODE'
+  [[ "${#manifest_paths[@]}" -gt 0 ]] || fail "missing module manifest under $repo/src"
+
+  for manifest_path in "${manifest_paths[@]}"; do
+    "$PYTHON" - "$manifest_path" "$version" <<'PYCODE'
 from __future__ import annotations
 
 import pathlib
@@ -347,10 +335,18 @@ text, count = re.subn(
     text,
     count=1,
 )
+if count == 0:
+    text, count = re.subn(
+        r'(?m)^(MODULE_VERSION\s*=\s*)["\'][^"\']+["\'](\s*)$',
+        rf'\1"{new_version}"\2',
+        text,
+        count=1,
+    )
 if count != 1:
     raise SystemExit(f"could not update ModuleManifest.version in {path}")
 path.write_text(text)
 PYCODE
+  done
 }
 
 update_webui_package() {
@@ -729,7 +725,7 @@ for repo in "${REPOS[@]}"; do
   fi
 
   set +e
-  git -C "$repo" ls-remote --exit-code --tags "$REMOTE" "refs/tags/$TAG" >/dev/null
+  timeout "$GIT_REMOTE_TIMEOUT" git -C "$repo" ls-remote --exit-code --tags "$REMOTE" "refs/tags/$TAG" >/dev/null
   ls_remote_status=$?
   set -e
 
@@ -790,9 +786,14 @@ for repo in "${MODULE_REPOS[@]}"; do
   if [[ "$DRY_RUN" -eq 0 ]]; then
     if git -C "$repo" diff --cached --quiet; then
       if [[ "${REPO_KINDS[$repo]}" == "package" ]]; then
-        fail "no staged changes for ${PROJECT_NAMES[$repo]} after version bump"
+        if [[ "$TARGET_VERSION" == "${OLD_VERSIONS[$repo]}" ]]; then
+          echo "No staged changes for ${PROJECT_NAMES[$repo]}; version is already $TARGET_VERSION, tagging current HEAD."
+        else
+          fail "no staged changes for ${PROJECT_NAMES[$repo]} after version bump"
+        fi
+      else
+        echo "No staged changes for ${PROJECT_NAMES[$repo]}; tagging current HEAD."
       fi
-      echo "No staged changes for ${PROJECT_NAMES[$repo]}; tagging current HEAD."
     else
       run git -C "$repo" commit -m "$COMMIT_MESSAGE"
     fi