feat: move API to typescript code generation (googleapis#135)

* remove docs/

* move to ts

* update synthtool

* run synthtool

* remove unneeded grafeas client

* update synthtool

* remove grafeas client

* cap class name

* broken link

* make it work

* lint

* debug

* sample test work

* test

* test

* retry 10 times

* finalize synth.py

* clean a little bit

* replace once, add to excludes

* fix doc

* feedback

* import os

* feedback

* fix

* remove file properly

* make it work

* linkinator

*  Update linkinator configure

* rerun synthtool for resources reorder

* remove google/api proto in list

* remove unneeded proto files in list

* format

* new line in proto list

* run synthtool

Author: xiaozhenliu-gg5

Diff for: .gitignore

@@ -1,13 +1,14 @@
 **/*.log
 **/node_modules
 .coverage
+coverage
 .nyc_output
 docs/
 out/
-./build/
+build/
 system-test/secrets.js
 system-test/*key.json
 *.lock
 .DS_Store
-__pycache__
 package-lock.json
+__pycache__

Diff for: .jsdoc.js

@@ -31,7 +31,7 @@ module.exports = {
   source: {
     excludePattern: '(^|\\/|\\\\)[._]',
     include: [
-      'src'
+      'build/src'
     ],
     includePattern: '\\.js$'
   },

Diff for: package.json

@@ -4,10 +4,10 @@
   "version": "1.7.1",
   "author": "Google LLC",
   "description": "Container Analysis API client for Node.js",
-  "main": "src/index.js",
+  "main": "build/src/index.js",
   "files": [
-    "protos",
-    "src"
+    "build/protos",
+    "build/src"
   ],
   "keywords": [
     "google apis client",
@@ -24,30 +24,44 @@
   ],
   "dependencies": {
     "@google-cloud/grafeas": "^2.0.0",
-    "google-gax": "^1.7.5"
+    "google-gax": "^1.9.0"
   },
   "devDependencies": {
+    "@types/mocha": "^5.2.5",
+    "@types/node": "^12.0.0",
     "c8": "^7.0.0",
     "eslint": "^6.0.0",
     "eslint-config-prettier": "^6.0.0",
     "eslint-plugin-node": "^11.0.0",
     "eslint-plugin-prettier": "^3.1.0",
+    "gts": "^1.0.0",
     "jsdoc": "^3.6.2",
     "jsdoc-fresh": "^1.0.1",
     "jsdoc-region-tag": "^1.0.2",
     "linkinator": "^1.5.0",
-    "mocha": "^7.0.0",
-    "prettier": "^1.17.1"
+    "mocha": "^6.1.4",
+    "null-loader": "^3.0.0",
+    "pack-n-play": "^1.0.0-2",
+    "power-assert": "^1.6.1",
+    "prettier": "^1.11.1",
+    "ts-loader": "^6.2.1",
+    "typescript": "^3.7.0",
+    "webpack": "^4.41.2",
+    "webpack-cli": "^3.3.10"
   },
   "scripts": {
-    "samples-test": "cd samples/ && npm link ../ && npm test && cd ../",
-    "test": "c8 mocha",
-    "lint": "eslint '**/*.js'",
+    "test": "c8 mocha build/test",
+    "samples-test": "cd samples/ && npm link ../ && npm install && npm test && cd ../",
+    "system-test": "mocha build/system-test",
     "docs": "jsdoc -c .jsdoc.js",
-    "system-test": "mocha system-test/ --timeout 600000",
-    "fix": "eslint '**/*.js' --fix",
+    "lint": "gts fix && eslint --fix samples/*.js",
+    "fix": "gts fix",
     "docs-test": "linkinator docs",
-    "predocs-test": "npm run docs"
+    "clean": "gts clean",
+    "compile": "tsc -p . && cp -r protos build/",
+    "compile-protos": "compileProtos src",
+    "predocs-test": "npm run docs",
+    "prepare": "npm run compile"
   },
   "license": "Apache-2.0",
   "engines": {

Diff for: protos/google/cloud/common_resources.proto

@@ -0,0 +1,52 @@
+// Copyright 2019 Google LLC.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// This file contains stub messages for common resources in GCP.
+// It is not intended to be directly generated, and is instead used by
+// other tooling to be able to match common resource patterns.
+syntax = "proto3";
+
+package google.cloud;
+
+import "google/api/resource.proto";
+
+
+option (google.api.resource_definition) = {
+  type: "cloudresourcemanager.googleapis.com/Project"
+  pattern: "projects/{project}"
+};
+
+
+option (google.api.resource_definition) = {
+  type: "cloudresourcemanager.googleapis.com/Organization"
+  pattern: "organizations/{organization}"
+};
+
+
+option (google.api.resource_definition) = {
+  type: "cloudresourcemanager.googleapis.com/Folder"
+  pattern: "folders/{folder}"
+};
+
+
+option (google.api.resource_definition) = {
+  type: "cloudbilling.googleapis.com/BillingAccount"
+  pattern: "billingAccounts/{billing_account}"
+};
+
+option (google.api.resource_definition) = {
+  type: "locations.googleapis.com/Location"
+  pattern: "projects/{project}/locations/{location}"
+};
+

Diff for: protos/grafeas/v1/attestation.proto

@@ -0,0 +1,73 @@
+// Copyright 2019 The Grafeas Authors. All rights reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package grafeas.v1;
+
+import "grafeas/v1/common.proto";
+
+option go_package = "google.golang.org/genproto/googleapis/grafeas/v1;grafeas";
+option java_multiple_files = true;
+option java_package = "io.grafeas.v1";
+option objc_class_prefix = "GRA";
+
+// An attestation wrapper with a PGP-compatible signature. This message only
+// supports `ATTACHED` signatures, where the payload that is signed is included
+// alongside the signature itself in the same file.
+
+// Note kind that represents a logical attestation "role" or "authority". For
+// example, an organization might have one `Authority` for "QA" and one for
+// "build". This note is intended to act strictly as a grouping mechanism for
+// the attached occurrences (Attestations). This grouping mechanism also
+// provides a security boundary, since IAM ACLs gate the ability for a principle
+// to attach an occurrence to a given note. It also provides a single point of
+// lookup to find all attached attestation occurrences, even if they don't all
+// live in the same project.
+message AttestationNote {
+  // This submessage provides human-readable hints about the purpose of the
+  // authority. Because the name of a note acts as its resource reference, it is
+  // important to disambiguate the canonical name of the Note (which might be a
+  // UUID for security purposes) from "readable" names more suitable for debug
+  // output. Note that these hints should not be used to look up authorities in
+  // security sensitive contexts, such as when looking up attestations to
+  // verify.
+  message Hint {
+    // Required. The human readable name of this attestation authority, for
+    // example "qa".
+    string human_readable_name = 1;
+  }
+
+  // Hint hints at the purpose of the attestation authority.
+  Hint hint = 1;
+}
+
+// Occurrence that represents a single "attestation". The authenticity of an
+// attestation can be verified using the attached signature. If the verifier
+// trusts the public key of the signer, then verifying the signature is
+// sufficient to establish trust. In this circumstance, the authority to which
+// this attestation is attached is primarily useful for lookup (how to find
+// this attestation if you already know the authority and artifact to be
+// verified) and intent (for which authority this attestation was intended to
+// sign.
+message AttestationOccurrence {
+  // Required. The serialized payload that is verified by one or more
+  // `signatures`.
+  bytes serialized_payload = 1;
+  // One or more signatures over `serialized_payload`.  Verifier implementations
+  // should consider this attestation message verified if at least one
+  // `signature` verifies `serialized_payload`.  See `Signature` in common.proto
+  // for more details on signature structure and verification.
+  repeated Signature signatures = 2;
+}

Diff for: protos/grafeas/v1/build.proto

@@ -0,0 +1,50 @@
+// Copyright 2019 The Grafeas Authors. All rights reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package grafeas.v1;
+
+import "grafeas/v1/provenance.proto";
+
+option go_package = "google.golang.org/genproto/googleapis/grafeas/v1;grafeas";
+option java_multiple_files = true;
+option java_package = "io.grafeas.v1";
+option objc_class_prefix = "GRA";
+
+// Note holding the version of the provider's builder and the signature of the
+// provenance message in the build details occurrence.
+message BuildNote {
+  // Required. Immutable. Version of the builder which produced this build.
+  string builder_version = 1;
+}
+
+// Details of a build occurrence.
+message BuildOccurrence {
+  // Required. The actual provenance for the build.
+  grafeas.v1.BuildProvenance provenance = 1;
+
+  // Serialized JSON representation of the provenance, used in generating the
+  // build signature in the corresponding build note. After verifying the
+  // signature, `provenance_bytes` can be unmarshalled and compared to the
+  // provenance to confirm that it is unchanged. A base64-encoded string
+  // representation of the provenance bytes is used for the signature in order
+  // to interoperate with openssl which expects this format for signature
+  // verification.
+  //
+  // The serialized form is captured both to avoid ambiguity in how the
+  // provenance is marshalled to json as well to prevent incompatibilities with
+  // future changes.
+  string provenance_bytes = 2;
+}

Diff for: protos/grafeas/v1/common.proto

@@ -0,0 +1,103 @@
+// Copyright 2019 The Grafeas Authors. All rights reserved.
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//    http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+syntax = "proto3";
+
+package grafeas.v1;
+
+option go_package = "google.golang.org/genproto/googleapis/grafeas/v1;grafeas";
+option java_multiple_files = true;
+option java_package = "io.grafeas.v1";
+option objc_class_prefix = "GRA";
+
+// Kind represents the kinds of notes supported.
+enum NoteKind {
+  // Unknown.
+  NOTE_KIND_UNSPECIFIED = 0;
+  // The note and occurrence represent a package vulnerability.
+  VULNERABILITY = 1;
+  // The note and occurrence assert build provenance.
+  BUILD = 2;
+  // This represents an image basis relationship.
+  IMAGE = 3;
+  // This represents a package installed via a package manager.
+  PACKAGE = 4;
+  // The note and occurrence track deployment events.
+  DEPLOYMENT = 5;
+  // The note and occurrence track the initial discovery status of a resource.
+  DISCOVERY = 6;
+  // This represents a logical "role" that can attest to artifacts.
+  ATTESTATION = 7;
+  // This represents an available package upgrade.
+  UPGRADE = 8;
+}
+
+// Metadata for any related URL information.
+message RelatedUrl {
+  // Specific URL associated with the resource.
+  string url = 1;
+  // Label to describe usage of the URL.
+  string label = 2;
+}
+
+// Verifiers (e.g. Kritis implementations) MUST verify signatures
+// with respect to the trust anchors defined in policy (e.g. a Kritis policy).
+// Typically this means that the verifier has been configured with a map from
+// `public_key_id` to public key material (and any required parameters, e.g.
+// signing algorithm).
+//
+// In particular, verification implementations MUST NOT treat the signature
+// `public_key_id` as anything more than a key lookup hint. The `public_key_id`
+// DOES NOT validate or authenticate a public key; it only provides a mechanism
+// for quickly selecting a public key ALREADY CONFIGURED on the verifier through
+// a trusted channel. Verification implementations MUST reject signatures in any
+// of the following circumstances:
+//   * The `public_key_id` is not recognized by the verifier.
+//   * The public key that `public_key_id` refers to does not verify the
+//     signature with respect to the payload.
+//
+// The `signature` contents SHOULD NOT be "attached" (where the payload is
+// included with the serialized `signature` bytes). Verifiers MUST ignore any
+// "attached" payload and only verify signatures with respect to explicitly
+// provided payload (e.g. a `payload` field on the proto message that holds
+// this Signature, or the canonical serialization of the proto message that
+// holds this signature).
+message Signature {
+  // The content of the signature, an opaque bytestring.
+  // The payload that this signature verifies MUST be unambiguously provided
+  // with the Signature during verification. A wrapper message might provide
+  // the payload explicitly. Alternatively, a message might have a canonical
+  // serialization that can always be unambiguously computed to derive the
+  // payload.
+  bytes signature = 1;
+
+  // The identifier for the public key that verifies this signature.
+  //   * The `public_key_id` is required.
+  //   * The `public_key_id` MUST be an RFC3986 conformant URI.
+  //   * When possible, the `public_key_id` SHOULD be an immutable reference,
+  //     such as a cryptographic digest.
+  //
+  // Examples of valid `public_key_id`s:
+  //
+  // OpenPGP V4 public key fingerprint:
+  //   * "openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA"
+  // See https://www.iana.org/assignments/uri-schemes/prov/openpgp4fpr for more
+  // details on this scheme.
+  //
+  // RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER
+  // serialization):
+  //   * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU"
+  //   * "nih:///sha-256;703f68f42aba2c6de30f488a5ea122fef76324679c9bf89791ba95a1271589a5"
+  string public_key_id = 2;
+}