Integrate lore CI (#57)

Reviewed-on: #57 Co-authored-by: Álex Román Núñez <eirexe@eirteam.moe>
2026-09-24 10:30:02 +00:00
parent f7bb8cc345
commit 2874d496ee
23 changed files with 203 additions and 82292 deletions
@@ -0,0 +1,111 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+readonly lore_url="${LORE_REPOSITORY_URL:-lore://lore.eirexe.moe/shinespark}"
+readonly default_branch="${LORE_DEFAULT_BRANCH:-main}"
+readonly assets_dir="${LORE_ASSETS_DIR:-assets}"
+branch="${1:-${LORE_BRANCH:-$default_branch}}"
+
+case "$branch" in
+    ""|*[!A-Za-z0-9._/-]*)
+        echo "error: invalid Lore branch name: $branch" >&2
+        exit 2
+        ;;
+esac
+
+if [[ -n "${LORE_IDENTITY_TOKEN:-}" ]]; then
+    lore_args=(--identity-token "$LORE_IDENTITY_TOKEN")
+elif [[ -n "${LORE_CI_USERNAME:-}" || -n "${LORE_CI_PASSWORD:-}" ]]; then
+    if [[ -z "${LORE_CI_USERNAME:-}" || -z "${LORE_CI_PASSWORD:-}" ]]; then
+        echo "error: LORE_CI_USERNAME and LORE_CI_PASSWORD must be provided together" >&2
+        exit 2
+    fi
+    : "${LORE_AUTH_URL:=https://auth.eirexe.moe}"
+    export LORE_AUTH_URL
+    token="$(python3 - <<'PY'
+import json
+import os
+import sys
+import urllib.error
+import urllib.request
+
+request = urllib.request.Request(
+    os.environ["LORE_AUTH_URL"].rstrip("/") + "/auth/login",
+    data=json.dumps({
+        "username": os.environ["LORE_CI_USERNAME"],
+        "password": os.environ["LORE_CI_PASSWORD"],
+    }).encode(),
+    headers={"Content-Type": "application/json"},
+    method="POST",
+)
+try:
+    with urllib.request.urlopen(request) as response:
+        payload = json.load(response)
+except urllib.error.HTTPError as error:
+    print(f"Lore authentication failed with HTTP {error.code}", file=sys.stderr)
+    sys.exit(1)
+
+token = payload.get("token")
+if not isinstance(token, str) or not token:
+    print("Lore authentication response did not contain a token", file=sys.stderr)
+    sys.exit(1)
+print(token)
+PY
+    )"
+    if [[ -n "${GITHUB_ENV:-}" ]]; then
+        echo "::add-mask::$token"
+    fi
+    lore_args=(--identity-token "$token")
+else
+    lore_args=()
+fi
+
+if [[ -e "$assets_dir" && ! -d "$assets_dir" ]]; then
+    echo "error: $assets_dir exists but is not a directory" >&2
+    exit 1
+fi
+
+if [[ -d "$assets_dir/.lore" ]]; then
+    if ! lore "${lore_args[@]}" --repository "$assets_dir" repository info >/dev/null; then
+        echo "error: $assets_dir is not a usable Lore checkout" >&2
+        exit 1
+    fi
+    if ! lore "${lore_args[@]}" --repository "$assets_dir" branch list --no-pager \
+        | grep -Fqx "  $branch"; then
+        if [[ "$branch" != "$default_branch" ]]; then
+            echo "warning: Lore branch does not exist: $branch; using $default_branch" >&2
+            branch="$default_branch"
+        else
+            echo "error: Lore branch does not exist: $branch" >&2
+            exit 1
+        fi
+    fi
+    lore "${lore_args[@]}" --repository "$assets_dir" sync "$branch@LATEST"
+    exit 0
+fi
+
+if [[ -d "$assets_dir" && -n "$(find "$assets_dir" -mindepth 1 -maxdepth 1 -print -quit)" ]]; then
+    echo "error: refusing to overwrite non-Lore directory: $assets_dir" >&2
+    exit 1
+fi
+
+metadata_dir="$(mktemp -d)"
+trap 'rm -rf "$metadata_dir"' EXIT
+lore "${lore_args[@]}" --non-interactive clone --bare "$lore_url" "$metadata_dir"
+
+if ! lore "${lore_args[@]}" --repository "$metadata_dir" branch list --no-pager \
+    | grep -Fqx "  $branch"; then
+    if [[ "$branch" != "$default_branch" ]]; then
+        echo "warning: Lore branch does not exist: $branch; using $default_branch" >&2
+        branch="$default_branch"
+    else
+        echo "error: Lore branch does not exist: $branch" >&2
+        echo "available branches:" >&2
+        lore "${lore_args[@]}" --repository "$metadata_dir" branch list --no-pager >&2
+        exit 1
+    fi
+fi
+
+rm -rf "$assets_dir"
+lore "${lore_args[@]}" --non-interactive clone --branch "$branch" "$lore_url" "$assets_dir"
+lore "${lore_args[@]}" --repository "$assets_dir" status --revision-only --no-pager