feat: add fallback for google maven

Signed-off-by: Umberto Sgueglia <usgueglia@contractor.linuxfoundation.org>

Author: ulemons

services/apps/packages_worker/src/maven/__tests__/registry.test.ts

@@ -15,8 +15,10 @@ describe('resolveRegistryBaseUrl', () => {
     )
   })
 
-  it('returns Maven Central for bare com.google.android (legacy SDK stubs on Central)', () => {
-    expect(resolveRegistryBaseUrl('com.google.android')).toBe('https://repo1.maven.org/maven2')
+  it('returns Google Maven for bare com.google.android (legacy Android SDK stubs)', () => {
+    expect(resolveRegistryBaseUrl('com.google.android')).toBe(
+      'https://dl.google.com/dl/android/maven2',
+    )
   })
 
   it('returns Google Maven for android.arch (pre-AndroidX Architecture Components)', () => {

services/apps/packages_worker/src/maven/registry.ts

@@ -11,7 +11,7 @@
  * metadata.xml / POM fetch logic works — only the base URL changes.
  */
 
-const MAVEN_CENTRAL_BASE_URL = 'https://repo1.maven.org/maven2'
+export const MAVEN_CENTRAL_BASE_URL = 'https://repo1.maven.org/maven2'
 
 interface RegistryEntry {
   prefix: string
@@ -25,10 +25,10 @@ const ALTERNATIVE_REGISTRIES: RegistryEntry[] = [
     baseUrl: 'https://dl.google.com/dl/android/maven2',
     pageUrl: (g, a) => `https://maven.google.com/web/index.html#${g}:${a}`,
   },
-  // com.google.android (bare, no sub-namespace) are legacy SDK stubs on Maven Central —
-  // only sub-namespaces like com.google.android.gms.* live on Google Maven.
+  // com.google.android — all artifacts (bare namespace and sub-namespaces like
+  // com.google.android.gms.*) are on Google Maven, not Maven Central.
   {
-    prefix: 'com.google.android.',
+    prefix: 'com.google.android',
     baseUrl: 'https://dl.google.com/dl/android/maven2',
     pageUrl: (g, a) => `https://maven.google.com/web/index.html#${g}:${a}`,
   },
@@ -154,6 +154,16 @@ export function resolveRegistryBaseUrl(groupId: string): string {
   return process.env.MAVEN_FETCHER_BASE_URL ?? MAVEN_CENTRAL_BASE_URL
 }
 
+/**
+ * Returns true when the given groupId maps to a non-Central registry.
+ * Used in the enrichment loop to decide whether a Central fallback lookup is worth trying
+ * (e.g. com.google.firebase:firebase-admin is a server-side Java SDK on Central, while
+ * most com.google.firebase artifacts are Android SDKs on Google Maven).
+ */
+export function isAlternativeRegistry(groupId: string): boolean {
+  return findEntry(groupId) !== undefined
+}
+
 /**
  * Returns a human-browsable URL for the given artifact in its authoritative registry.
  */

services/apps/packages_worker/src/maven/runMavenEnrichmentLoop.ts

@@ -18,7 +18,12 @@ import { getMavenConfig } from '../config'
 import { extractArtifact, getPomCacheStats, normalizeScmUrl } from './extract'
 import { isMavenFetchError, resolveVersionsList } from './metadata'
 import { isPrerelease, parseRepoUrl } from './normalize'
-import { resolveRegistryBaseUrl, resolveRegistryPageUrl } from './registry'
+import {
+  MAVEN_CENTRAL_BASE_URL,
+  isAlternativeRegistry,
+  resolveRegistryBaseUrl,
+  resolveRegistryPageUrl,
+} from './registry'
 
 const log = getServiceChildLogger('maven')
 
@@ -115,10 +120,25 @@ async function processCriticalPackage(qx: QueryExecutor, pkg: PackageRow, forceF
     return { status: 'skipped' }
   }
 
-  const baseUrl = resolveRegistryBaseUrl(groupId)
+  let baseUrl = resolveRegistryBaseUrl(groupId)
 
   // Phase 1: lightweight metadata fetch to get the current upstream version.
-  const metadata = await resolveVersionsList(groupId, artifactId, baseUrl)
+  let metadata = await resolveVersionsList(groupId, artifactId, baseUrl)
+
+  // If the primary (non-Central) registry returned NOT_FOUND, try Maven Central as a
+  // fallback. This handles artifacts that share a namespace with non-Central packages but
+  // are themselves published on Central — e.g. com.google.firebase:firebase-admin is the
+  // server-side Java SDK on Central, while most com.google.firebase artifacts are Android
+  // SDKs on Google Maven.
+  if (isMavenFetchError(metadata) && metadata.kind === 'NOT_FOUND' && isAlternativeRegistry(groupId)) {
+    const centralUrl = process.env.MAVEN_FETCHER_BASE_URL ?? MAVEN_CENTRAL_BASE_URL
+    const centralMetadata = await resolveVersionsList(groupId, artifactId, centralUrl)
+    if (!isMavenFetchError(centralMetadata)) {
+      log.info({ groupId, artifactId }, 'Not found in primary registry — resolved via Maven Central fallback')
+      baseUrl = centralUrl
+      metadata = centralMetadata
+    }
+  }
 
   if (isMavenFetchError(metadata)) {
     if (metadata.kind === 'NOT_FOUND') {