core2026/app/release-controller/src/selfUpgrade.ts

import path from 'node:path';

import {
    assertReleaseComponents,
    buildTurboReleaseCommand,
    type BuildCommand,
    type BuildRunner,
    type GitWorkspaceManager,
    type ProcessDefinition,
    type ProcessManager,
    readReleaseManifest,
    sanitizeManagedProcessEnv,
} from '@sammo-ts/gateway-api';

import type { ReleaseControllerConfig } from './config.js';
import { buildGatewayMigrationCommand } from './releaseController.js';

const CONTROLLER_PROCESS_NAME = 'sammo:release-controller';

const buildReleaseControllerCommands = (
    workspaceRoot: string,
    needsInstall: boolean,
    config: ReleaseControllerConfig
): BuildCommand[] => {
    const env = sanitizeManagedProcessEnv(config.baseEnv);
    return [
        ...(needsInstall ? [{ command: 'pnpm', args: ['install', '--frozen-lockfile'], cwd: workspaceRoot, env }] : []),
        buildTurboReleaseCommand(workspaceRoot, config.workspaceRoot, ['@sammo-ts/release-controller'], env),
    ];
};

export const buildReleaseControllerDefinition = (
    workspaceRoot: string,
    config: ReleaseControllerConfig
): ProcessDefinition => ({
    name: CONTROLLER_PROCESS_NAME,
    script: path.join(workspaceRoot, 'app', 'release-controller', 'dist', 'index.js'),
    cwd: path.join(workspaceRoot, 'app', 'release-controller'),
    args: ['daemon'],
    env: {
        ...sanitizeManagedProcessEnv(config.baseEnv),
        GATEWAY_DATABASE_URL: config.gatewayDatabaseUrl,
        GATEWAY_DB_SCHEMA: config.gatewayDbSchema,
        POSTGRES_POOL_MAX: String(config.postgresPoolMax),
        RELEASE_CONTROLLER_WORKSPACE_ROOT: config.workspaceRoot,
        RELEASE_CONTROLLER_WORKTREE_ROOT: config.worktreeRoot,
    },
});

const workspaceFromControllerCwd = (cwd: string | undefined, fallback: string): string =>
    cwd ? path.resolve(cwd, '..', '..') : fallback;

export const upgradeReleaseController = async (options: {
    sourceMode: 'BRANCH' | 'COMMIT';
    sourceRef: string;
    workspaceManager: GitWorkspaceManager;
    buildRunner: BuildRunner;
    processManager: ProcessManager;
    config: ReleaseControllerConfig;
    readinessTimeoutMs?: number;
}): Promise<{ commitSha: string; workspace: string }> => {
    const commitSha = await options.workspaceManager.resolveCommit(options.sourceMode, options.sourceRef);
    const workspace = await options.workspaceManager.prepare(commitSha);
    // The target controller, rather than this bootstrap CLI, owns the target
    // controller protocol. Keep all manifest/schema/component checks while
    // allowing this explicit self-upgrade boundary to cross protocol versions.
    const manifest = await readReleaseManifest(workspace.root, { allowControllerUpgrade: true });
    assertReleaseComponents(manifest, ['release-controller']);
    const build = await options.buildRunner.run(
        buildReleaseControllerCommands(workspace.root, workspace.needsInstall, options.config)
    );
    if (!build.ok) throw new Error(`Release controller build failed: ${build.output.slice(-4000)}`);
    const migration = await options.buildRunner.run([buildGatewayMigrationCommand(workspace.root, options.config)]);
    if (!migration.ok) throw new Error(`Gateway migration failed: ${migration.output.slice(-4000)}`);

    const existing = (await options.processManager.list()).find((process) => process.name === CONTROLLER_PROCESS_NAME);
    const previousDefinition = buildReleaseControllerDefinition(
        workspaceFromControllerCwd(existing?.cwd, options.config.workspaceRoot),
        options.config
    );
    if (existing) {
        try {
            await options.processManager.stop(CONTROLLER_PROCESS_NAME);
        } finally {
            await options.processManager.delete(CONTROLLER_PROCESS_NAME);
        }
    }
    try {
        await options.processManager.start(buildReleaseControllerDefinition(workspace.root, options.config));
        const deadline = Date.now() + (options.readinessTimeoutMs ?? options.config.readinessTimeoutMs);
        while (Date.now() < deadline) {
            const matching = (await options.processManager.list()).filter(
                (process) => process.name === CONTROLLER_PROCESS_NAME
            );
            if (
                matching.length === 1 &&
                matching[0]?.status.toLowerCase() === 'online' &&
                (matching[0]?.restartCount ?? 0) === 0
            ) {
                return { commitSha, workspace: workspace.root };
            }
            await new Promise<void>((resolve) => setTimeout(resolve, 250));
        }
        throw new Error('Release controller did not become online before the timeout.');
    } catch (error) {
        try {
            await options.processManager.delete(CONTROLLER_PROCESS_NAME);
        } catch {
            // The failed new process may already be absent.
        }
        if (existing) await options.processManager.start(previousDefinition);
        throw error;
    }
};