Release SDK updates - #705

#!/bin/bash
set -euo pipefail

result="$(printf '[]' | jq -r '.[0].number')"
printf 'Current selector result: <%s>\n' "$result"
test "$result" = "null"

fixed_result="$(printf '[]' | jq -r '.[0].number // empty')"
test -z "$fixed_result"

#!/bin/bash
set -euo pipefail

file=".github/workflows/stlc-promote.yml"
sed -n '60,98p' "$file"

printf '\nRelevant command references:\n'
rg -n --fixed-strings 'gh pr list' "$file"
rg -n --fixed-strings 'gh pr create' "$file"
rg -n --fixed-strings 'gh pr merge' "$file"

#!/bin/bash
set -euo pipefail

rg -nP '^\s*uses:\s*[^@]+@(?![0-9a-f]{40}(?:\s|#|$))' .github/workflows

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- workflow files ---'
cat -n .github/workflows/stlc-sync.yml
printf '%s\n' '--- promote workflow ---'
cat -n .github/workflows/stlc-promote.yml
printf '%s\n' '--- existing SHA pin example ---'
cat -n .github/workflows/release-doctor.yml | sed -n '1,35p'
printf '%s\n' '--- workflow references and credential/permission context ---'
rg -n -C 4 'uses:|permissions:|private.key|private_key|PRODUCTION_REPO_TOKEN|contents:|workflows:' .github/workflows

#!/bin/bash
set -euo pipefail

api='https://api.github.com'

resolve_tag() {
  local repo="$1" tag="$2"
  local ref object_type object_sha commit_sha
  ref="$(curl -fsSL -H 'Accept: application/vnd.github+json' "$api/repos/$repo/git/ref/tags/$tag")"
  object_type="$(printf '%s' "$ref" | jq -r '.object.type')"
  object_sha="$(printf '%s' "$ref" | jq -r '.object.sha')"
  if [ "$object_type" = tag ]; then
    commit_sha="$(curl -fsSL -H 'Accept: application/vnd.github+json' "$api/repos/$repo/git/tags/$object_sha" | jq -r '.object.sha')"
  else
    commit_sha="$object_sha"
  fi
  printf '%s %s %s %s\n' "$repo" "$tag" "$object_type" "$commit_sha"
  curl -fsSL -H 'Accept: application/vnd.github+json' \
    "$api/repos/$repo/commits/$commit_sha" | jq -r '.sha'
}

printf '%s\n' '--- actions/checkout v6 tag and commit ---'
resolve_tag actions/checkout v6

printf '%s\n' '--- reported checkout SHA commit existence ---'
curl -fsSL -H 'Accept: application/vnd.github+json' \
  "$api/repos/actions/checkout/commits/2b67f65a7862734479904797175249615a9997f7" |
  jq -r '[.sha, .commit.message | split("\n")[0]] | `@tsv`'

printf '%s\n' '--- finchbot repository visibility and refs ---'
curl -sS -o /tmp/finchbot-repo.json -w 'repo HTTP %{http_code}\n' \
  -H 'Accept: application/vnd.github+json' \
  "$api/repos/finch-api/github-actions"
if [ -f /tmp/finchbot-repo.json ]; then
  jq -r 'if .message then .message else [.full_name, .private, .default_branch] | `@tsv` end' \
    /tmp/finchbot-repo.json
fi
curl -sS -o /tmp/finchbot-main.json -w 'main HTTP %{http_code}\n' \
  -H 'Accept: application/vnd.github+json' \
  "$api/repos/finch-api/github-actions/commits/main"
if [ -f /tmp/finchbot-main.json ]; then
  jq -r 'if .message then .message else .sha end' /tmp/finchbot-main.json
fi

#!/bin/bash
set -u

api='https://api.github.com'

printf '%s\n' '--- actions/checkout v6 refs ---'
for tag in v6 v6.0.0; do
  body="$(curl -sS -H 'Accept: application/vnd.github+json' \
    "$api/repos/actions/checkout/git/ref/tags/$tag")"
  status=$?
  printf 'tag=%s curl_status=%s\n' "$tag" "$status"
  if [ "$status" -eq 0 ]; then
    printf '%s\n' "$body" | jq -r '[.ref, .object.type, .object.sha] | `@tsv`'
  fi
done

printf '%s\n' '--- finchbot repository and main ref ---'
for path in repos/finch-api/github-actions repos/finch-api/github-actions/git/ref/heads/main repos/finch-api/github-actions/commits/main; do
  headers="$(mktemp)"
  body="$(curl -sS -D "$headers" -o - -H 'Accept: application/vnd.github+json' "$api/$path")"
  status="$(awk '$1 ~ /^HTTP\\// {code=$2} END {print code}' "$headers")"
  printf 'path=%s HTTP=%s\n' "$path" "$status"
  printf '%s\n' "$body" | jq -r 'if .message then .message else ([.full_name, .ref, .object.type, .object.sha, .sha] | map(select(. != null)) | join("\t")) end' 2>/dev/null || true
  rm -f "$headers"
done

printf '%s\n' '--- affected references ---'
rg -n '^\s*uses:\s*(actions/checkout|finch-api/github-actions/finchbot)@' \
  .github/workflows/stlc-sync.yml .github/workflows/stlc-promote.yml

#!/bin/bash
set -euo pipefail

rg -n -C 4 'base64|macos|ubuntu|runs-on' scripts/mock scripts/test .github/workflows

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- scripts/mock ---'
cat -n scripts/mock

printf '%s\n' '--- scripts/test references ---'
rg -n -C 8 'scripts/mock|mock|--daemon|SPEC_TMPFILE|STAINLESS_OPENAPI_SPEC_URL' scripts/test

printf '%s\n' '--- script metadata ---'
file scripts/mock scripts/test
head -n 3 scripts/mock scripts/test

#!/bin/bash
set -euo pipefail

printf '%s\n' '--- platform and local-development documentation ---'
rg -n -i -C 3 'macos|mac|darwin|windows|linux|operating system|platform|supported' \
  README.md CONTRIBUTING.md docs scripts .github pyproject.toml setup.cfg setup.py 2>/dev/null || true

printf '%s\n' '--- package and workflow files ---'
git ls-files | rg '(^|/)(README|CONTRIBUTING|pyproject\.toml|setup\.cfg|setup\.py|package\.json|.*\.yml|.*\.yaml)$' | head -80

printf '%s\n' '--- base64 implementations available in this sandbox ---'
command -v base64 || true
base64 --help 2>&1 | sed -n '1,20p' || true

printf '%s\n' '--- lifecycle-related references ---'
rg -n -C 5 'mktemp|SPEC_TMPFILE|trap|steady.*(spec|yaml|openapi)|openapi' scripts README.md docs .github 2>/dev/null || true