angular-cn/aio/aio-builds-setup/dockerbuild/scripts-js/lib/upload-server/index-preverify-pr.ts

// Imports
import {getEnvVar} from '../common/utils';
import {BuildVerifier} from './build-verifier';

// Run
_main();

// Functions
function _main() {
  const secret = 'unused';
  const githubToken = getEnvVar('AIO_GITHUB_TOKEN');
  const repoSlug = getEnvVar('AIO_REPO_SLUG');
  const organization = getEnvVar('AIO_GITHUB_ORGANIZATION');
  const allowedTeamSlugs = getEnvVar('AIO_GITHUB_TEAM_SLUGS').split(',');
  const trustedPrLabel = getEnvVar('AIO_TRUSTED_PR_LABEL');
  const pr = +getEnvVar('AIO_PREVERIFY_PR');

  const buildVerifier = new BuildVerifier(secret, githubToken, repoSlug, organization, allowedTeamSlugs,
                                          trustedPrLabel);

  // Exit codes:
  // - 0: The PR can be automatically trusted (i.e. author belongs to trusted team or PR has the "trusted PR" label).
  // - 1: An error occurred.
  // - 2: The PR cannot be automatically trusted.
  buildVerifier.getPrIsTrusted(pr).
    then(isTrusted => {
      if (!isTrusted) {
        console.warn(
            `The PR cannot be automatically verified, because it doesn't have the "${trustedPrLabel}" label and the ` +
            `the author is not an active member of any of the following teams: ${allowedTeamSlugs.join(', ')}`);
      }

      process.exit(isTrusted ? 0 : 2);
    }).
    catch(err => {
      console.error(err);
      process.exit(1);
    });
}