release: propagate pinned CKB checkout to tx measure

Author: a19q3

AGENTS.md

@@ -294,8 +294,11 @@ Existing command families to be aware of:
 - `proposals/novaseal` is a submodule (`NovaSeal.git`, branch `main`). Same
   for `proposals/evolving-dob/evolving-dob-profile-v1`.
 - `tools/ckb-tx-measure` depends on `../ckb/util/jsonrpc-types` and
-  `../ckb/util/types`; the gate builds the helper with CellScript's pinned
-  Rust 1.97.1 toolchain so its declared `rust-version` remains enforceable.
+  `../ckb/util/types`; when release validation receives `--ckb-repo`, the gate
+  stages the helper's tracked workspace under `target/` so those same relative
+  paths resolve to the explicit checkout. The gate builds the helper with
+  CellScript's pinned Rust 1.97.1 toolchain so its declared `rust-version`
+  remains enforceable.
 - `--primitive-strict 0.16` is the current production assurance gate; the
   README mentions it and the policy lives in `docs/`.
 

CHANGELOG.md

@@ -12,7 +12,9 @@
   longer breaks CI through an obsolete exact-string comparison. Let the full
   backend stateful audit use an explicit isolated pinned CKB checkout through
   `CELLSCRIPT_CKB_REPO`, avoiding any need to modify an unrelated sibling CKB
-  worktree during release validation.
+  worktree during release validation. Propagate the release gate's existing
+  `--ckb-repo` selection to its independent `ckb-tx-measure` workspace as
+  well, so every CKB-dependent release check resolves against the same pin.
 - Turn the browser Playground into a recoverable Cell-oriented workbench.
   Browser-local workspace snapshots now retain source files, entry selection,
   active panels, and an honest saved/dirty state across refreshes. Failed

crates/cellscript-tools/src/tooling_release.rs

@@ -454,6 +454,19 @@ pub fn run(root: &Path) -> Result<()> {
         !tx_measure_gate.contains("RUSTUP_TOOLCHAIN"),
         "CKB transaction measure tooling must use CellScript's pinned Rust toolchain",
     )?;
+    for token in [
+        "release_ckb_repo_from_args() {",
+        "staging_dir=\"$(mktemp -d \"$ROOT_DIR/target/cellscript-ckb-tx-measure.XXXXXX\")\"",
+        "cp tools/ckb-tx-measure/Cargo.toml tools/ckb-tx-measure/Cargo.lock",
+        "cp src/bin/ckb_tx_measure.rs",
+        "ln -s \"$ckb_repo\" \"$staging_dir/ckb\"",
+    ] {
+        require(gate_script.contains(token), format!("release CKB checkout propagation is missing '{token}'"))?;
+    }
+    require(
+        gate_script.matches("run_release_auxiliary_checks \"$ckb_repo\"").count() == 2,
+        "release and release-quick must both propagate the selected CKB checkout to auxiliary checks",
+    )?;
     require(
         gate_script.contains("--root \"$ROOT_DIR\" workspace-version"),
         "release source identity must read the root package version from Cargo.toml",

docs/CELLSCRIPT_GATE_POLICY.md

@@ -130,6 +130,12 @@ the stateful wrapper forwards it as the acceptance harness's `--ckb-repo`.
 This avoids modifying or stashing an unrelated CKB worktree during release
 validation.
 
+For `release` and `release-quick`, pass the same checkout with `--ckb-repo`.
+The release gate stages the independent `ckb-tx-measure` workspace under
+`target/` with its tracked manifest, lockfile, and source so its relative CKB
+dependencies resolve against that explicit checkout too. The default remains
+the sibling `../ckb`; the tracked lockfile remains bound to the release pin.
+
 The transaction matrix is produced by the native Rust acceptance harness and
 is intentionally labelled as recipe-replayer evidence, not generated-builder
 output. Separately, the gate runs the public `cellc action build` and

docs/releases/CELLSCRIPT_0_23_RELEASE_NOTES.md

@@ -352,9 +352,12 @@ CELLSCRIPT_CKB_REPO=/path/to/pinned/ckb ./scripts/cellscript_gate.sh backend
 Production release evidence:
 
 ```bash
-./scripts/cellscript_gate.sh release
+./scripts/cellscript_gate.sh release --ckb-repo /path/to/pinned/ckb
 ```
 
+The explicit checkout is used both by production acceptance and by the staged
+`ckb-tx-measure` workspace. Omitting it retains the sibling `../ckb` default.
+
 The `backend` stateful portion and both release modes require a clean tree and
 their documented external dependencies. A passing lighter gate must not be
 reported as release evidence.

scripts/cellscript_gate.sh

@@ -432,8 +432,50 @@ check_wasm_release_bundle() {
     fi
 }
 
+release_ckb_repo_from_args() {
+    local ckb_repo="$ROOT_DIR/../ckb"
+    while (($# > 0)); do
+        case "$1" in
+            --ckb-repo)
+                if (($# < 2)); then
+                    printf 'missing value for --ckb-repo\n' >&2
+                    return 2
+                fi
+                ckb_repo="$2"
+                shift 2
+                ;;
+            *)
+                shift
+                ;;
+        esac
+    done
+    printf '%s\n' "$ckb_repo"
+}
+
 check_ckb_tx_measure_tool() {
-    run cargo test --manifest-path tools/ckb-tx-measure/Cargo.toml --locked
+    local ckb_repo="$1"
+    local default_ckb_repo="$ROOT_DIR/../ckb"
+    if [[ ! -d "$ckb_repo" ]]; then
+        printf 'CKB checkout does not exist: %s\n' "$ckb_repo" >&2
+        return 1
+    fi
+    ckb_repo="$(cd "$ckb_repo" && pwd -P)"
+    if [[ -d "$default_ckb_repo" ]]; then
+        default_ckb_repo="$(cd "$default_ckb_repo" && pwd -P)"
+        if [[ "$ckb_repo" == "$default_ckb_repo" ]]; then
+            run cargo test --manifest-path tools/ckb-tx-measure/Cargo.toml --locked
+            return
+        fi
+    fi
+
+    local staging_dir
+    staging_dir="$(mktemp -d "$ROOT_DIR/target/cellscript-ckb-tx-measure.XXXXXX")"
+    mkdir -p "$staging_dir/cellscript/tools/ckb-tx-measure" "$staging_dir/cellscript/src/bin"
+    cp tools/ckb-tx-measure/Cargo.toml tools/ckb-tx-measure/Cargo.lock \
+        "$staging_dir/cellscript/tools/ckb-tx-measure/"
+    cp src/bin/ckb_tx_measure.rs "$staging_dir/cellscript/src/bin/"
+    ln -s "$ckb_repo" "$staging_dir/ckb"
+    run cargo test --manifest-path "$staging_dir/cellscript/tools/ckb-tx-measure/Cargo.toml" --locked
 }
 
 check_novaseal_rust_tooling() {
@@ -541,6 +583,7 @@ run_backend_gate() {
 }
 
 run_release_auxiliary_checks() {
+    local ckb_repo="$1"
     require_cmd npm
 
     run cargo run --quiet --locked -p cellscript-tools --bin cellscript-tools -- \
@@ -549,7 +592,7 @@ run_release_auxiliary_checks() {
     check_ckb_release_docs
     check_ckb_acceptance_boundaries
     check_novaseal_acceptance_boundaries
-    check_ckb_tx_measure_tool
+    check_ckb_tx_measure_tool "$ckb_repo"
     check_novaseal_rust_tooling
     check_novaseal_verifier_pinning
     check_wasm_release_bundle
@@ -561,18 +604,22 @@ run_release_auxiliary_checks() {
 }
 
 run_release_quick_gate() {
+    local ckb_repo
+    ckb_repo="$(release_ckb_repo_from_args "$@")"
     check_release_source_identity
     run_ci_gate
-    run_release_auxiliary_checks
+    run_release_auxiliary_checks "$ckb_repo"
     run ./scripts/ckb_cellscript_acceptance.sh --compile-only --production "$@"
     printf '\nCellScript backend shape report: %s\n' "$CELLSCRIPT_BACKEND_SHAPE_REPORT"
     printf 'CellScript Molecule schema manifest report: %s\n' "$CELLSCRIPT_MOLECULE_SCHEMA_MANIFEST_REPORT"
 }
 
 run_release_gate() {
+    local ckb_repo
+    ckb_repo="$(release_ckb_repo_from_args "$@")"
     check_release_source_identity
     run_ci_gate
-    run_release_auxiliary_checks
+    run_release_auxiliary_checks "$ckb_repo"
     run ./scripts/ckb_cellscript_acceptance.sh --production --stateful-scenarios "$@"
     printf '\nCellScript backend shape report: %s\n' "$CELLSCRIPT_BACKEND_SHAPE_REPORT"
     printf 'CellScript Molecule schema manifest report: %s\n' "$CELLSCRIPT_MOLECULE_SCHEMA_MANIFEST_REPORT"