| import fs from 'node:fs'; | |
| import path from 'node:path'; | |
| import { manifestName, verifyContext } from './release-identity.mjs'; | |
| try { | |
| const identity = verifyContext( | |
| process.cwd(), | |
| JSON.parse(fs.readFileSync(manifestName, 'utf8')), | |
| process.env.BUILD_GIT_SHA | |
| ); | |
| if ( | |
| process.env.BUILD_TIMESTAMP && | |
| new Date(process.env.BUILD_TIMESTAMP).toISOString() !== identity.buildTimestamp | |
| ) | |
| throw new Error('RELEASE_TIMESTAMP_MISMATCH'); | |
| const output = | |
| process.env.PROVENANCE_FILE || '/app/apps/server/dist/assets/build-provenance.json'; | |
| fs.mkdirSync(path.dirname(output), { recursive: true }); | |
| fs.writeFileSync(output, JSON.stringify(identity, null, 2) + '\n'); | |
| console.log(JSON.stringify(identity)); | |
| } catch (error) { | |
| console.error(`RELEASE_CONTEXT_REJECTED: ${error.code || error.message}`); | |
| process.exitCode = 1; | |
| } | |