initial commit

Author: mikesposito

.cursor/BUGBOT.md

@@ -0,0 +1,3 @@
+# Guidance for Bugbot
+
+Please read the [agents file](./AGENTS.md) in the root of the project for instructions.

.depcheckrc.yml

@@ -0,0 +1,32 @@
+---
+ignores:
+  # Ignore dependencies used by Yarn binaries in `.yarn`
+  - '@yarnpkg/*'
+  - 'clipanion'
+  - 'typanion'
+  # Ignore dependencies imported implicitly by TypeScript
+  - '@types/*'
+  # Ignore tools (packages which we use as executables and not libraries)
+  - '@lavamoat/allow-scripts'
+  - '@metamask/auto-changelog'
+  - '@metamask/create-release-branch'
+  - 'depcheck'
+  - 'eslint-interactive'
+  - 'rimraf'
+  - 'simple-git-hooks'
+  - 'ts-node'
+  - 'typedoc'
+  # Ignore plugins for tools
+  - '@typescript-eslint/*'
+  - 'eslint-config-*'
+  - 'eslint-plugin-*'
+  - 'jest-silent-reporter'
+  - 'prettier-plugin-packagejson'
+  - 'typescript-eslint'
+  # Jest environment referenced in `jest.config.scripts.js`
+  - 'jest-environment-node'
+  - 'jest-environment-jsdom'
+  # Ignore dependencies imported implicitly by tools
+  - 'eslint-import-resolver-typescript'
+  # Ignore dependencies which plug into the NPM lifecycle
+  - '@lavamoat/preinstall-always-fail'

.editorconfig

@@ -0,0 +1,13 @@
+# http://editorconfig.org
+root = true
+
+[*]
+charset = utf-8
+end_of_line = lf
+indent_size = 2
+indent_style = space
+insert_final_newline = true
+trim_trailing_whitespace = true
+
+[*.md]
+trim_trailing_whitespace = false

.gitattributes

@@ -0,0 +1,12 @@
+* text=auto
+
+yarn.lock linguist-generated=false
+
+# `tsconfig.json` is already recognized as JSONC. This ensures our other `tsconfig` files are as
+# well. They all use this naming convention.
+tsconfig.**.json linguist-language=jsonc
+
+# yarn v3
+# See: https://yarnpkg.com/getting-started/qa#which-files-should-be-gitignored
+/.yarn/releases/** binary
+/.yarn/plugins/** binary

.github/CODEOWNERS

@@ -0,0 +1,7 @@
+# Lines starting with '#' are comments.
+# Each line is a file pattern followed by one or more owners.
+
+# Note: Please keep this synchronized with the `teams.json` file in the repository root.
+# That file is used for some automated workflows, and maps controller to owning team(s).
+
+* @MetaMask/core-platform @MetaMask/network

.github/actionlint.yml

@@ -0,0 +1,8 @@
+# Please see the documentation for all configuration options:
+# https://github.com/rhysd/actionlint/blob/main/docs/config.md#configuration-file
+
+paths:
+  .github/workflows/publish-release.yml:
+    ignore:
+      # Queue option is not supported by actionlint yet.
+      - 'unexpected key "queue" for "concurrency" section. expected one of "cancel-in-progress", "group"'

.github/actions/check-merge-queue-changelogs/action.yml

@@ -0,0 +1,98 @@
+name: Check merge queue changelogs
+description: Check if the changelog was incorrectly merged in a merge queue
+  pull request.
+
+inputs:
+  github-token:
+    description: The GitHub token to use for authentication.
+    required: false
+    default: ${{ github.token }}
+
+runs:
+  using: composite
+  steps:
+    - name: Checkout repository
+      uses: actions/checkout@v6
+      with:
+        fetch-depth: 0
+
+    - name: Get pull request number
+      id: pr-number
+      uses: actions/github-script@v8
+      env:
+        HEAD_REF: ${{ github.event.pull_request.head.ref || github.event.merge_group.head_ref }}
+      with:
+        github-token: ${{ inputs.github-token }}
+        script: |
+          const { HEAD_REF } = process.env;
+
+          if (context.eventName === 'pull_request') {
+            const prNumber = context.payload.pull_request.number;
+            return core.setOutput('pr-number', prNumber);
+          }
+
+          const match = HEAD_REF.match(/\/pr-([0-9]+)-/u);
+          if (!match) {
+            return core.setFailed(`Could not extract pull request number from head ref: "${HEAD_REF}".`);
+          }
+
+          const number = parseInt(match[1], 10);
+          core.setOutput('pr-number', number);
+
+    - name: Get pull request branch
+      id: pr-branch
+      shell: bash
+      env:
+        REPOSITORY: ${{ github.repository }}
+        PR_NUMBER: ${{ steps.pr-number.outputs.pr-number }}
+        GH_TOKEN: ${{ inputs.github-token }}
+      run: |
+        BRANCH=$(gh api "/repos/${REPOSITORY}/pulls/${PR_NUMBER}" --jq=.head.ref)
+        echo "pr-branch=$BRANCH" >> "$GITHUB_OUTPUT"
+
+    - name: Check changelog changes
+      id: changelog-check
+      shell: bash
+      env:
+        BASE_REF: ${{ github.event.pull_request.base.ref || github.event.merge_group.base_ref }}
+        PR_BRANCH: ${{ steps.pr-branch.outputs.pr-branch }}
+        ACTION_PATH: ${{ github.action_path }}
+      run: |
+        set -euo pipefail
+
+        # Strip invalid prefix from `BASE_REF`
+        # It comes prefixed with `refs/heads/`, but the branch is not checked out in this context
+        # We need to express it as a remote branch
+        PREFIXED_REF_REGEX='refs/heads/(.+)'
+        if [[ "$BASE_REF" =~ $PREFIXED_REF_REGEX ]]; then
+          BASE_REF="${BASH_REMATCH[1]}"
+        fi
+
+        TARGET_REF=$(git merge-base "origin/$BASE_REF" "origin/$PR_BRANCH")
+        git fetch origin "$TARGET_REF"
+
+        UPDATED_CHANGELOGS=$(git diff --name-only "$TARGET_REF" "origin/$PR_BRANCH" | grep -E 'CHANGELOG\.md$' || true)
+        if [ -n "$UPDATED_CHANGELOGS" ]; then
+          for FILE in $UPDATED_CHANGELOGS; do
+            if [ ! -f "$FILE" ]; then
+              echo "Changelog file \"$FILE\" was deleted in this PR. Skipping."
+              continue
+            fi
+
+            if ! git cat-file -e "$TARGET_REF":"$FILE" 2>/dev/null; then
+              echo "Changelog file \"$FILE\" is new in this PR. Skipping."
+              continue
+            fi
+
+            echo "Checking changelog file: $FILE"
+            git show "$TARGET_REF":"$FILE" > /tmp/base-changelog.md
+            git show origin/"$PR_BRANCH":"$FILE" > /tmp/pr-changelog.md
+
+            node "${ACTION_PATH}/check-changelog-diff.cjs" \
+              /tmp/base-changelog.md \
+              /tmp/pr-changelog.md \
+              "$FILE"
+          done
+        else
+          echo "No CHANGELOG.md files were modified in this PR."
+        fi

.github/actions/check-merge-queue-changelogs/check-changelog-diff.cjs

@@ -0,0 +1,101 @@
+// This script checks that any new changelog entries added in a PR
+// remain in the [Unreleased] section after the PR is merged.
+
+const fs = require('fs');
+
+if (process.argv.length < 5) {
+  console.error(
+    'Usage: node check-changelog-diff.cjs <base-file> <pr-file> <merged-file>',
+  );
+
+  // eslint-disable-next-line n/no-process-exit
+  process.exit(1);
+}
+
+/* eslint-disable n/no-sync */
+// The type of these is inferred as `Buffer` when using "utf-8" directly instead
+// of an options object. Even though it's a plain JavaScript file, it's nice to
+// keep the types correct.
+const baseContent = fs.readFileSync(process.argv[2], {
+  encoding: 'utf-8',
+});
+
+const prContent = fs.readFileSync(process.argv[3], {
+  encoding: 'utf-8',
+});
+
+const mergedContent = fs.readFileSync(process.argv[4], {
+  encoding: 'utf-8',
+});
+/* eslint-enable n/no-sync */
+
+/**
+ * Extract the "[Unreleased]" section from the changelog content.
+ *
+ * This doesn't actually parse the Markdown, it just looks for the section
+ * header and collects lines until the next section header.
+ *
+ * @param {string} content - The changelog content.
+ * @returns {Set<string>} The lines in the "[Unreleased]" section as a
+ * {@link Set}.
+ */
+function getUnreleasedSection(content) {
+  const lines = content.split('\n');
+
+  let inUnreleased = false;
+  const sectionLines = new Set();
+
+  for (const line of lines) {
+    // Find unreleased header.
+    if (line.trim().match(/^##\s+\[Unreleased\]/u)) {
+      inUnreleased = true;
+      continue;
+    }
+
+    // Stop if we hit the next version header (## [x.x.x]).
+    if (inUnreleased && line.trim().match(/^##\s+\[/u)) {
+      break;
+    }
+
+    // If inside the unreleased header, add lines to the set.
+    if (inUnreleased) {
+      sectionLines.add(line.trim());
+    }
+  }
+
+  return sectionLines;
+}
+
+/**
+ * Get the lines that were added in the PR content compared to the base content.
+ *
+ * @param {Set<string>} oldLines - The base changelog content.
+ * @param {Set<string>} newLines - The PR changelog content.
+ * @returns {string[]} The added lines as an array of strings.
+ */
+function getAddedLines(oldLines, newLines) {
+  return Array.from(newLines).filter(
+    (line) => line.length > 0 && !oldLines.has(line) && !line.startsWith('#'),
+  );
+}
+
+const mergedUnreleased = getUnreleasedSection(mergedContent);
+const addedLines = getAddedLines(
+  getUnreleasedSection(baseContent),
+  getUnreleasedSection(prContent),
+);
+
+const missingLines = [];
+for (const line of addedLines) {
+  if (!mergedUnreleased.has(line)) {
+    missingLines.push(line);
+  }
+}
+
+if (missingLines.length > 0) {
+  console.error(
+    `The following lines added in the PR are missing from the "Unreleased" section after merge:\n\n  ${missingLines.join('\n  ')}\n\nPlease update your pull request and ensure that new changelog entries remain in the "Unreleased" section.`,
+  );
+
+  process.exitCode = 1;
+}