@catladder/cli 0.0.0-main-8dbb6c76 → 0.0.0-main-a6b45abe

package/dist/apps/cli/src/release/stepSummary.js

@@ -0,0 +1,32 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.workflowLink = exports.appendStepSummary = void 0;
+/**
+ * github step summaries: markdown shown on the run page, so a run
+ * explains what happened without reading job logs. No-op outside
+ * github actions (GITHUB_STEP_SUMMARY unset, e.g. on gitlab).
+ */
+const fs_1 = require("fs");
+const appendStepSummary = (markdown) => {
+    const file = process.env.GITHUB_STEP_SUMMARY;
+    if (!file) {
+        return;
+    }
+    (0, fs_1.appendFileSync)(file, markdown + "\n");
+};
+exports.appendStepSummary = appendStepSummary;
+/**
+ * link to a generated workflow's run list (e.g.
+ * `workflowLink("catladder-main.yml", "catladder main")`)
+ */
+const workflowLink = (fileName, label) => {
+    var _a;
+    const server = (_a = process.env.GITHUB_SERVER_URL) !== null && _a !== void 0 ? _a : "https://github.com";
+    const repository = process.env.GITHUB_REPOSITORY;
+    if (!repository) {
+        return label;
+    }
+    return `[${label}](${server}/${repository}/actions/workflows/${fileName})`;
+};
+exports.workflowLink = workflowLink;
+//# sourceMappingURL=stepSummary.js.map

package/dist/apps/cli/src/release/stepSummary.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stepSummary.js","sourceRoot":"","sources":["../../../../../src/release/stepSummary.ts"],"names":[],"mappings":";;;AAAA;;;;GAIG;AACH,2BAAoC;AAE7B,MAAM,iBAAiB,GAAG,CAAC,QAAgB,EAAE,EAAE;IACpD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;IAC7C,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;IACT,CAAC;IACD,IAAA,mBAAc,EAAC,IAAI,EAAE,QAAQ,GAAG,IAAI,CAAC,CAAC;AACxC,CAAC,CAAC;AANW,QAAA,iBAAiB,qBAM5B;AAEF;;;GAGG;AACI,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,KAAa,EAAU,EAAE;;IACtE,MAAM,MAAM,GAAG,MAAA,OAAO,CAAC,GAAG,CAAC,iBAAiB,mCAAI,oBAAoB,CAAC;IACrE,MAAM,UAAU,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IACjD,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,KAAK,KAAK,MAAM,IAAI,UAAU,sBAAsB,QAAQ,GAAG,CAAC;AAC7E,CAAC,CAAC;AAPW,QAAA,YAAY,gBAOvB"}

package/dist/apps/cli/src/scripts/generateCliSkillReference.d.ts

@@ -0,0 +1 @@
+export declare const renderCliReference: () => string;

package/dist/apps/cli/src/scripts/generateCliSkillReference.js

@@ -0,0 +1,111 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderCliReference = void 0;
+const fs_1 = require("fs");
+const path_1 = require("path");
+const commands = __importStar(require("../commands"));
+/**
+ * renders the CLI command reference of the catladder-cli agent skill
+ * from the command definitions, so the skill always documents the
+ * commands that actually exist. Runs as part of the cli build
+ * (`build:skill-cli-reference`) and writes into the repository's
+ * `skills/` directory — commit the result.
+ */
+const kebab = (name) => name.replace(/([A-Z])/g, "-$1").toLowerCase();
+const cleanMessage = (message) => message.replace(/\s*🤔\s*$/, "").trim();
+const renderInput = ([name, def]) => {
+    const description = cleanMessage(def.message);
+    const details = [
+        def.required ? "required" : undefined,
+        "default" in def && def.default !== undefined
+            ? `default: ${JSON.stringify(def.default)}`
+            : undefined,
+    ]
+        .filter(Boolean)
+        .join(", ");
+    const usage = def.positional
+        ? `\`${name}\` (positional)`
+        : def.type === "boolean"
+            ? `\`--${kebab(name)}\``
+            : `\`--${kebab(name)} <value>\``;
+    return `- ${usage}: ${description}${details ? ` (${details})` : ""}`;
+};
+const renderCommand = (def) => {
+    const positionals = Object.entries(def.inputs)
+        .filter(([, input]) => input.positional)
+        .map(([name]) => ` [${name}]`)
+        .join("");
+    const inputs = Object.entries(def.inputs);
+    return [
+        `## \`catladder ${def.name}${positionals}\``,
+        "",
+        def.description,
+        ...(inputs.length > 0 ? ["", ...inputs.map(renderInput)] : []),
+    ].join("\n");
+};
+const isCommandDef = (value) => typeof value === "object" &&
+    value !== null &&
+    "name" in value &&
+    "execute" in value;
+const renderCliReference = () => {
+    const defs = Object.values(commands)
+        .filter(isCommandDef)
+        .sort((a, b) => a.name.localeCompare(b.name));
+    return [
+        "# catladder CLI command reference",
+        "",
+        "<!-- rendered from the command definitions by",
+        "     apps/cli/src/scripts/generateCliSkillReference.ts — do not edit -->",
+        "",
+        "All commands run non-interactively as `yarn catladder <command> ...`",
+        "(`pnpm catladder ...` in pnpm projects); see SKILL.md for how to",
+        "pass inputs.",
+        "",
+        defs.map(renderCommand).join("\n\n"),
+        "",
+    ].join("\n");
+};
+exports.renderCliReference = renderCliReference;
+// executed by the cli build via tsx (node itself cannot require the
+// ESM-only deps of the command modules on older versions)
+const main = () => {
+    const repoRootCandidates = [
+        (0, path_1.join)(__dirname, "../../../.."), // source: apps/cli/src/scripts
+        (0, path_1.join)(__dirname, "../../../../../../.."), // compiled: apps/cli/dist/apps/cli/src/scripts
+    ];
+    const repoRoot = repoRootCandidates.find((candidate) => (0, fs_1.existsSync)((0, path_1.join)(candidate, "skills")));
+    if (!repoRoot) {
+        throw new Error("skills directory not found next to the cli workspace");
+    }
+    const target = (0, path_1.join)(repoRoot, "skills", "catladder-cli", "references", "commands.md");
+    (0, fs_1.mkdirSync)((0, path_1.join)(target, ".."), { recursive: true });
+    (0, fs_1.writeFileSync)(target, (0, exports.renderCliReference)(), "utf-8");
+    console.log(`wrote ${target}`);
+};
+if (require.main === module) {
+    main();
+}
+//# sourceMappingURL=generateCliSkillReference.js.map

package/dist/apps/cli/src/scripts/generateCliSkillReference.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generateCliSkillReference.js","sourceRoot":"","sources":["../../../../../src/scripts/generateCliSkillReference.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2BAA0D;AAC1D,+BAA4B;AAC5B,sDAAwC;AAGxC;;;;;;GAMG;AAEH,MAAM,KAAK,GAAG,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AAE9E,MAAM,YAAY,GAAG,CAAC,OAAe,EAAE,EAAE,CACvC,OAAO,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;AAE1C,MAAM,WAAW,GAAG,CAAC,CAAC,IAAI,EAAE,GAAG,CAAqB,EAAU,EAAE;IAC9D,MAAM,WAAW,GAAG,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,OAAO,GAAG;QACd,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS;QACrC,SAAS,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;YAC3C,CAAC,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE;YAC3C,CAAC,CAAC,SAAS;KACd;SACE,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,MAAM,KAAK,GAAG,GAAG,CAAC,UAAU;QAC1B,CAAC,CAAC,KAAK,IAAI,iBAAiB;QAC5B,CAAC,CAAC,GAAG,CAAC,IAAI,KAAK,SAAS;YACtB,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI;YACxB,CAAC,CAAC,OAAO,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC;IACrC,OAAO,KAAK,KAAK,KAAK,WAAW,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACvE,CAAC,CAAC;AAEF,MAAM,aAAa,GAAG,CAAC,GAAe,EAAU,EAAE;IAChD,MAAM,WAAW,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC;SAC3C,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,KAAK,IAAI,GAAG,CAAC;SAC7B,IAAI,CAAC,EAAE,CAAC,CAAC;IACZ,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,OAAO;QACL,kBAAkB,GAAG,CAAC,IAAI,GAAG,WAAW,IAAI;QAC5C,EAAE;QACF,GAAG,CAAC,WAAW;QACf,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,GAAG,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/D,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,CAAC,KAAc,EAAuB,EAAE,CAC3D,OAAO,KAAK,KAAK,QAAQ;IACzB,KAAK,KAAK,IAAI;IACd,MAAM,IAAI,KAAK;IACf,SAAS,IAAI,KAAK,CAAC;AAEd,MAAM,kBAAkB,GAAG,GAAW,EAAE;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC;SACjC,MAAM,CAAC,YAAY,CAAC;SACpB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,OAAO;QACL,mCAAmC;QACnC,EAAE;QACF,+CAA+C;QAC/C,0EAA0E;QAC1E,EAAE;QACF,sEAAsE;QACtE,kEAAkE;QAClE,cAAc;QACd,EAAE;QACF,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC;QACpC,EAAE;KACH,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC,CAAC;AAjBW,QAAA,kBAAkB,sBAiB7B;AAEF,oEAAoE;AACpE,0DAA0D;AAC1D,MAAM,IAAI,GAAG,GAAG,EAAE;IAChB,MAAM,kBAAkB,GAAG;QACzB,IAAA,WAAI,EAAC,SAAS,EAAE,aAAa,CAAC,EAAE,+BAA+B;QAC/D,IAAA,WAAI,EAAC,SAAS,EAAE,sBAAsB,CAAC,EAAE,+CAA+C;KACzF,CAAC;IACF,MAAM,QAAQ,GAAG,kBAAkB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CACrD,IAAA,eAAU,EAAC,IAAA,WAAI,EAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,CACtC,CAAC;IACF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAC1E,CAAC;IACD,MAAM,MAAM,GAAG,IAAA,WAAI,EACjB,QAAQ,EACR,QAAQ,EACR,eAAe,EACf,YAAY,EACZ,aAAa,CACd,CAAC;IACF,IAAA,cAAS,EAAC,IAAA,WAAI,EAAC,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,IAAA,kBAAa,EAAC,MAAM,EAAE,IAAA,0BAAkB,GAAE,EAAE,OAAO,CAAC,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC,CAAC;AAEF,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;IAC5B,IAAI,EAAE,CAAC;AACT,CAAC"}

package/dist/apps/cli/src/security/auditDocument.d.ts

@@ -0,0 +1,19 @@
+export declare function makeTemplate(): string;
+export type SecurityEvaluation = {
+    topics: {
+        description: string;
+        responsibles: string[];
+        note: string;
+        isUnknown: boolean;
+        isAnswered: boolean;
+        isSecured: boolean;
+    }[];
+    score: {
+        rating: number;
+        totalTopics: number;
+        answeredTopics: number;
+        securedTopics: number;
+        unknownTopics: number;
+    };
+};
+export declare function evaluateDocument(document: string): SecurityEvaluation;

package/dist/apps/cli/src/security/auditDocument.js

@@ -0,0 +1,109 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.evaluateDocument = exports.makeTemplate = void 0;
+const topics_json_1 = __importDefault(require("./topics.json"));
+const allTopics = topics_json_1.default;
+const checkYes = "✅";
+const checkNo = "❌";
+const checkPlaceholder = `${checkYes}/${checkNo}`;
+const responsiblePlaceholder = "@...";
+const rows = [
+    ["Responsible", checkPlaceholder, "Description", "Note", "More Information"],
+].concat(allTopics.map((t) => [
+    Array(t.responsibles).fill(responsiblePlaceholder).join(", "),
+    checkPlaceholder,
+    t.description,
+    "",
+    t.more,
+]));
+function makeTable(rows) {
+    const colWidths = calculateColumnWidths(rows);
+    return `
+${makeRow(rows[0], colWidths, " ")}
+${makeRow(rows[0].map(() => ""), colWidths, "-")}
+${rows
+        .slice(1)
+        .map((row) => makeRow(row, colWidths, " "))
+        .join("\n")}
+`;
+}
+function calculateColumnWidths(rows) {
+    const columnCount = rows[0].length;
+    return Array.from({ length: columnCount }, (_, i) => i).map((columnIndex) => Math.max(...rows.map((row) => row[columnIndex].length)));
+}
+function makeRow(row, colWidths, fillString) {
+    return `| ${row
+        .map((cell, i) => cell.padEnd(colWidths[i], fillString))
+        .join(" | ")} |`;
+}
+function makeTemplate() {
+    return `
+# Security Audit Report
+
+A security audit report document is a comprehensive assessment of an application's security posture, containing security topics that auditors can mark to indicate the state of various security aspects.
+
+It serves as a structured guide for security team to evaluate different security factors such as authentication, authorization, data encryption, input validation, and more.
+
+## General Information
+
+- Project Owner is @...
+- Dev team:
+  - @...
+  - @...
+  - @...
+
+## Project Security
+
+${makeTable(rows)}
+
+`;
+}
+exports.makeTemplate = makeTemplate;
+function evaluateDocument(document) {
+    var _a, _b;
+    const rawRows = (_b = (_a = document.match(/^\s*\|.*?\|\s*$/gm)) === null || _a === void 0 ? void 0 : _a.map((row) => row.trim())) !== null && _b !== void 0 ? _b : [];
+    const matchedRows = rawRows
+        .map((row) => row.split("|").map((col) => col.trim()))
+        .slice(2);
+    const knownTopics = new Set(allTopics.map((t) => t.description));
+    const topics = matchedRows.map((col) => {
+        const responsibles = col[1].split(", ");
+        const answer = col[2];
+        const description = col[3];
+        const note = col[4];
+        const isUnknown = !knownTopics.has(description);
+        const isAnswered = !isUnknown &&
+            !answer.includes(checkPlaceholder) &&
+            !responsibles.some((responsible) => responsible.includes(responsiblePlaceholder));
+        const isSecured = !isUnknown && isAnswered && answer.includes(checkYes);
+        return {
+            responsibles,
+            answer,
+            description,
+            note,
+            isUnknown,
+            isAnswered,
+            isSecured,
+        };
+    });
+    const totalTopics = allTopics.length;
+    const answeredTopics = topics.filter((t) => t.isAnswered).length;
+    const securedTopics = topics.filter((t) => t.isSecured).length;
+    const unknownTopics = topics.filter((t) => t.isUnknown).length;
+    const rating = Math.round((securedTopics / totalTopics) * 100);
+    return {
+        topics,
+        score: {
+            rating,
+            totalTopics,
+            answeredTopics,
+            securedTopics,
+            unknownTopics,
+        },
+    };
+}
+exports.evaluateDocument = evaluateDocument;
+//# sourceMappingURL=auditDocument.js.map

package/dist/apps/cli/src/security/auditDocument.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auditDocument.js","sourceRoot":"","sources":["../../../../../src/security/auditDocument.ts"],"names":[],"mappings":";;;;;;AAAA,gEAAuC;AAQvC,MAAM,SAAS,GAAY,qBAAU,CAAC;AAEtC,MAAM,QAAQ,GAAG,GAAG,CAAC;AACrB,MAAM,OAAO,GAAG,GAAG,CAAC;AAEpB,MAAM,gBAAgB,GAAG,GAAG,QAAQ,IAAI,OAAO,EAAE,CAAC;AAClD,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,IAAI,GAAG;IACX,CAAC,aAAa,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,EAAE,kBAAkB,CAAC;CAC7E,CAAC,MAAM,CACN,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;IACnB,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,IAAI,CAAC,sBAAsB,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;IAC7D,gBAAgB;IAChB,CAAC,CAAC,WAAW;IACb,EAAE;IACF,CAAC,CAAC,IAAI;CACP,CAAC,CACH,CAAC;AAEF,SAAS,SAAS,CAAC,IAAgB;IACjC,MAAM,SAAS,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAE9C,OAAO;EACP,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,CAAC;EAChC,OAAO,CACP,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EACrB,SAAS,EACT,GAAG,CACJ;EACC,IAAI;SACH,KAAK,CAAC,CAAC,CAAC;SACR,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC;SAC1C,IAAI,CAAC,IAAI,CAAC;CACZ,CAAC;AACF,CAAC;AAED,SAAS,qBAAqB,CAAC,IAAgB;IAC7C,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACnC,OAAO,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,WAAW,EAAE,EAAE,CAC1E,IAAI,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CACxD,CAAC;AACJ,CAAC;AAED,SAAS,OAAO,CAAC,GAAa,EAAE,SAAmB,EAAE,UAAkB;IACrE,OAAO,KAAK,GAAG;SACZ,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC;SACvD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;AACrB,CAAC;AAED,SAAgB,YAAY;IAC1B,OAAO;;;;;;;;;;;;;;;;;EAiBP,SAAS,CAAC,IAAI,CAAC;;CAEhB,CAAC;AACF,CAAC;AArBD,oCAqBC;AAoBD,SAAgB,gBAAgB,CAAC,QAAgB;;IAC/C,MAAM,OAAO,GACX,MAAA,MAAA,QAAQ,CAAC,KAAK,CAAC,mBAAmB,CAAC,0CAAE,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,mCAAI,EAAE,CAAC;IACtE,MAAM,WAAW,GAAG,OAAO;SACxB,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;SACrD,KAAK,CAAC,CAAC,CAAC,CAAC;IACZ,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC;IAEjE,MAAM,MAAM,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACrC,MAAM,YAAY,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QACtB,MAAM,WAAW,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAC3B,MAAM,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAEpB,MAAM,SAAS,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;QAChD,MAAM,UAAU,GACd,CAAC,SAAS;YACV,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,CAAC;YAClC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CACjC,WAAW,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAC7C,CAAC;QACJ,MAAM,SAAS,GAAG,CAAC,SAAS,IAAI,UAAU,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAExE,OAAO;YACL,YAAY;YACZ,MAAM;YACN,WAAW;YACX,IAAI;YACJ,SAAS;YACT,UAAU;YACV,SAAS;SACV,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,SAAS,CAAC,MAAM,CAAC;IACrC,MAAM,cAAc,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;IACjE,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAC/D,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC;IAE/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,GAAG,WAAW,CAAC,GAAG,GAAG,CAAC,CAAC;IAE/D,OAAO;QACL,MAAM;QACN,KAAK,EAAE;YACL,MAAM;YACN,WAAW;YACX,cAAc;YACd,aAAa;YACb,aAAa;SACd;KACF,CAAC;AACJ,CAAC;AAnDD,4CAmDC"}

package/dist/apps/cli/src/security/createSecurityAuditMergeRequest.d.ts

@@ -0,0 +1,9 @@
+import type { Gitlab } from "@gitbeaker/core";
+import { Err } from "ts-results-es";
+export declare const SECURITY_AUDIT_FILE_NAME: "SECURITY.md";
+export declare function createSecurityAuditMergeRequest({ projectId, mainBranch, userId, api, }: {
+    projectId: string;
+    mainBranch: string;
+    userId: number;
+    api: Gitlab;
+}): Promise<Err<string> | import("ts-results-es").Ok<import("@gitbeaker/core").ExpandedMergeRequestSchema>>;

package/dist/apps/cli/src/security/createSecurityAuditMergeRequest.js

@@ -0,0 +1,52 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createSecurityAuditMergeRequest = exports.SECURITY_AUDIT_FILE_NAME = void 0;
+const ts_results_es_1 = require("ts-results-es");
+const auditDocument_1 = require("./auditDocument");
+function makeDatedBranchName(branchName) {
+    const date = new Date().toISOString().slice(0, -5).replaceAll(/[:.T]/g, "-");
+    return `${branchName}-${date}`;
+}
+const MR_TITLE = "Draft: chore(security): add security audit document";
+exports.SECURITY_AUDIT_FILE_NAME = "SECURITY.md";
+async function createSecurityAuditMergeRequest({ projectId, mainBranch, userId, api, }) {
+    const mrs = (await ts_results_es_1.Result.wrapAsync(() => api.MergeRequests.all({
+        state: "opened",
+        wip: "yes",
+        labels: "security-audit",
+    }))).mapErr(() => `could not search for existing merge requests`);
+    if (mrs.isErr())
+        return mrs;
+    const existingMr = mrs.value[0];
+    if (existingMr)
+        return (0, ts_results_es_1.Err)(`open merge request with security audit already exists: ${existingMr.web_url}`);
+    const auditTemplate = ts_results_es_1.Result.wrap(() => (0, auditDocument_1.makeTemplate)()).mapErr(() => "could not make security audit template document");
+    if (auditTemplate.isErr())
+        return auditTemplate;
+    const branch = (await ts_results_es_1.Result.wrapAsync(() => api.Branches.create(projectId, makeDatedBranchName("chore/security-audit"), mainBranch))).mapErr((e) => {
+        console.log(e);
+        return "could not create branch";
+    });
+    if (branch.isErr())
+        return branch;
+    const commit = (await ts_results_es_1.Result.wrapAsync(() => api.Commits.create(projectId, branch.value.name, "chore(security): add empty security audit document template", [
+        {
+            action: "create",
+            filePath: exports.SECURITY_AUDIT_FILE_NAME,
+            content: auditTemplate.value,
+            encoding: "text",
+        },
+    ]))).mapErr(() => "could not create commit");
+    if (commit.isErr())
+        return commit;
+    const mr = (await ts_results_es_1.Result.wrapAsync(() => api.MergeRequests.create(projectId, branch.value.name, mainBranch, MR_TITLE, {
+        description: `Please follow and update security audit document in \`${exports.SECURITY_AUDIT_FILE_NAME}\`.`,
+        assigneeId: userId,
+        squash: true,
+        labels: "security-audit",
+        removeSourceBranch: true,
+    }))).mapErr(() => "could not create merge request");
+    return mr;
+}
+exports.createSecurityAuditMergeRequest = createSecurityAuditMergeRequest;
+//# sourceMappingURL=createSecurityAuditMergeRequest.js.map

package/dist/apps/cli/src/security/createSecurityAuditMergeRequest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createSecurityAuditMergeRequest.js","sourceRoot":"","sources":["../../../../../src/security/createSecurityAuditMergeRequest.ts"],"names":[],"mappings":";;;AACA,iDAA4C;AAC5C,mDAA+C;AAE/C,SAAS,mBAAmB,CAAC,UAAkB;IAC7C,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7E,OAAO,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC;AACjC,CAAC;AAED,MAAM,QAAQ,GAAG,qDAAqD,CAAC;AAC1D,QAAA,wBAAwB,GAAG,aAAsB,CAAC;AAExD,KAAK,UAAU,+BAA+B,CAAC,EACpD,SAAS,EACT,UAAU,EACV,MAAM,EACN,GAAG,GAMJ;IACC,MAAM,GAAG,GAAG,CACV,MAAM,sBAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAC1B,GAAG,CAAC,aAAa,CAAC,GAAG,CAAC;QACpB,KAAK,EAAE,QAAQ;QACf,GAAG,EAAE,KAAK;QACV,MAAM,EAAE,gBAAgB;KACzB,CAAC,CACH,CACF,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,8CAAuD,CAAC,CAAC;IACxE,IAAI,GAAG,CAAC,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC;IAE5B,MAAM,UAAU,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAChC,IAAI,UAAU;QACZ,OAAO,IAAA,mBAAG,EACR,0DAA0D,UAAU,CAAC,OAAO,EAAE,CAC/E,CAAC;IAEJ,MAAM,aAAa,GAAG,sBAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAY,GAAE,CAAC,CAAC,MAAM,CAC5D,GAAG,EAAE,CAAC,iDAA0D,CACjE,CAAC;IACF,IAAI,aAAa,CAAC,KAAK,EAAE;QAAE,OAAO,aAAa,CAAC;IAEhD,MAAM,MAAM,GAAG,CACb,MAAM,sBAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAC1B,GAAG,CAAC,QAAQ,CAAC,MAAM,CACjB,SAAS,EACT,mBAAmB,CAAC,sBAAsB,CAAC,EAC3C,UAAU,CACX,CACF,CACF,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QACb,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACf,OAAO,yBAAkC,CAAC;IAC5C,CAAC,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAElC,MAAM,MAAM,GAAG,CACb,MAAM,sBAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAC1B,GAAG,CAAC,OAAO,CAAC,MAAM,CAChB,SAAS,EACT,MAAM,CAAC,KAAK,CAAC,IAAI,EACjB,6DAA6D,EAC7D;QACE;YACE,MAAM,EAAE,QAAQ;YAChB,QAAQ,EAAE,gCAAwB;YAClC,OAAO,EAAE,aAAa,CAAC,KAAK;YAC5B,QAAQ,EAAE,MAAM;SACjB;KACF,CACF,CACF,CACF,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,yBAAkC,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,KAAK,EAAE;QAAE,OAAO,MAAM,CAAC;IAElC,MAAM,EAAE,GAAG,CACT,MAAM,sBAAM,CAAC,SAAS,CAAC,GAAG,EAAE,CAC1B,GAAG,CAAC,aAAa,CAAC,MAAM,CACtB,SAAS,EACT,MAAM,CAAC,KAAK,CAAC,IAAI,EACjB,UAAU,EACV,QAAQ,EACR;QACE,WAAW,EAAE,yDAAyD,gCAAwB,KAAK;QACnG,UAAU,EAAE,MAAM;QAClB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,gBAAgB;QACxB,kBAAkB,EAAE,IAAI;KACzB,CACF,CACF,CACF,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,gCAAyC,CAAC,CAAC;IAE1D,OAAO,EAAE,CAAC;AACZ,CAAC;AArFD,0EAqFC"}

package/dist/apps/cli/src/security/evaluateSecurityAudit.d.ts

@@ -0,0 +1,5 @@
+import type { SecurityEvaluation } from "./auditDocument";
+export declare function evaluateSecurityAudit({ path }: {
+    path: string;
+}): Promise<import("ts-results-es").Err<string> | import("ts-results-es").Ok<SecurityEvaluation>>;
+export declare function makeSecurityAuditOverview(evaluation: SecurityEvaluation): string;

package/dist/apps/cli/src/security/evaluateSecurityAudit.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeSecurityAuditOverview = exports.evaluateSecurityAudit = void 0;
+const ts_results_es_1 = require("ts-results-es");
+const path_1 = require("path");
+const promises_1 = require("fs/promises");
+const createSecurityAuditMergeRequest_1 = require("./createSecurityAuditMergeRequest");
+const auditDocument_1 = require("./auditDocument");
+async function evaluateSecurityAudit({ path }) {
+    return (await ts_results_es_1.Result.wrapAsync(async () => {
+        const filePath = (0, path_1.join)(path, createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME);
+        const docData = await (0, promises_1.readFile)(filePath);
+        const doc = docData.toString("utf-8");
+        return (0, auditDocument_1.evaluateDocument)(doc);
+    })).mapErr((e) => `could not evaluate ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}: ${e}`);
+}
+exports.evaluateSecurityAudit = evaluateSecurityAudit;
+function makeSecurityAuditOverview(evaluation) {
+    const ratingToEmo = (r) => (r < 33 ? "🟥" : r < 66 ? "🟨" : "🟩");
+    return `Project security posture overview:
+ 🧐 Total topics: ${evaluation.score.totalTopics}
+ 🔒 Secured topics: ${evaluation.score.securedTopics}
+ 📢 Answered topics: ${evaluation.score.answeredTopics}
+ ❔ Unknown topics: ${evaluation.score.unknownTopics}
+ 📊 Rating: ${ratingToEmo(evaluation.score.rating)} ${evaluation.score.rating}/100`;
+}
+exports.makeSecurityAuditOverview = makeSecurityAuditOverview;
+//# sourceMappingURL=evaluateSecurityAudit.js.map

package/dist/apps/cli/src/security/evaluateSecurityAudit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evaluateSecurityAudit.js","sourceRoot":"","sources":["../../../../../src/security/evaluateSecurityAudit.ts"],"names":[],"mappings":";;;AAAA,iDAAuC;AACvC,+BAA4B;AAC5B,0CAAuC;AACvC,uFAA6E;AAE7E,mDAAmD;AAE5C,KAAK,UAAU,qBAAqB,CAAC,EAAE,IAAI,EAAoB;IACpE,OAAO,CACL,MAAM,sBAAM,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE;QAChC,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAI,EAAE,0DAAwB,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,MAAM,IAAA,mBAAQ,EAAC,QAAQ,CAAC,CAAC;QACzC,MAAM,GAAG,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QACtC,OAAO,IAAA,gCAAgB,EAAC,GAAG,CAAC,CAAC;IAC/B,CAAC,CAAC,CACH,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,sBAAsB,0DAAwB,KAAK,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC;AATD,sDASC;AAED,SAAgB,yBAAyB,CAAC,UAA8B;IACtE,MAAM,WAAW,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IAE1E,OAAO;oBACW,UAAU,CAAC,KAAK,CAAC,WAAW;sBAC1B,UAAU,CAAC,KAAK,CAAC,aAAa;uBAC7B,UAAU,CAAC,KAAK,CAAC,cAAc;qBACjC,UAAU,CAAC,KAAK,CAAC,aAAa;cACrC,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,IAC/C,UAAU,CAAC,KAAK,CAAC,MACnB,MAAM,CAAC;AACR,CAAC;AAXD,8DAWC"}

package/dist/apps/cli/src/security/topics.json

@@ -0,0 +1,117 @@
+[
+    {
+        "description": "No API keys or secrets are stored in repository",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app does not provide password login",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Passwords are not stored",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "No sensitive information (passwords, keys, user data, ...) is logged or traced",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Passwords are stored hashed with salt and salt is not stored in the repository",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Input that ends up in DOM is properly sanitized",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "All user inputs have reasonable validations",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app is not using cookies",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app is using cookies and cookies are properly configured",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app uses JWT with a secret and the secret is not stored in the repository",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Authorization and user roles (RBAC) were reviewed thoroughly",
+        "responsibles": 2,
+        "more": ""
+    },
+    {
+        "description": "CORS headers do not use `*`",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "CSP headers are properly configured (no `unsafe-inline` or `unsafe-eval`)",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "DoS defense mechanism is implemented",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "YAML/XML parsing is not used or used YAML/XML parsers have disabled DTD",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app implements CSRF prevention",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app has a rate limitter",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app has disabled GraphQL introspection and schema registry",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app has set GraphQL complexity query limits",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "`sitemap.xml` does not leak any routes with sensitive data",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Cloud storage is (private) configured to not leak any sensitive data publicly",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "Security Dashboard checks weekly vulnerable dependencies https://dep.panter.swiss/",
+        "responsibles": 1,
+        "more": ""
+    },
+    {
+        "description": "The app has `.well-known/security.txt` https://securitytxt.org/",
+        "responsibles": 1,
+        "more": ""
+    }
+]

package/dist/apps/cli/src/store/updateCatladderStore.d.ts

@@ -0,0 +1,10 @@
+import type { CatladderStore } from "../../../../packages/pipeline/src/index.js";
+/**
+ * applies an update to `.catladder-store/store.yml` at the git root,
+ * creating the folder on first use
+ */
+export declare const updateCatladderStore: (update: (store: CatladderStore) => CatladderStore) => Promise<{
+    gcloudProjects?: Record<string, {
+        projectNumber: string;
+    }>;
+}>;

package/dist/apps/cli/src/store/updateCatladderStore.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.updateCatladderStore = void 0;
+const promises_1 = require("fs/promises");
+const path_1 = require("path");
+const pipeline_1 = require("../../../../packages/pipeline/src/index.js");
+const yaml_1 = require("yaml");
+const projects_1 = require("../utils/projects");
+const HEADER = `# managed by catladder — written by \`catladder project setup\`.
+# Non-secret, machine-fetched values needed to generate the pipeline.
+# Check this file in. If it is missing, rerun \`catladder project setup\`.
+`;
+/**
+ * applies an update to `.catladder-store/store.yml` at the git root,
+ * creating the folder on first use
+ */
+const updateCatladderStore = async (update) => {
+    var _a;
+    const root = (_a = (await (0, projects_1.getGitRoot)())) !== null && _a !== void 0 ? _a : process.cwd();
+    const store = (0, pipeline_1.readCatladderStore)(root);
+    const updated = pipeline_1.catladderStoreSchema.parse(update(store));
+    const path = (0, pipeline_1.getCatladderStorePath)(root);
+    await (0, promises_1.mkdir)((0, path_1.dirname)(path), { recursive: true });
+    await (0, promises_1.writeFile)(path, HEADER + (0, yaml_1.stringify)(updated));
+    return updated;
+};
+exports.updateCatladderStore = updateCatladderStore;
+//# sourceMappingURL=updateCatladderStore.js.map

package/dist/apps/cli/src/store/updateCatladderStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"updateCatladderStore.js","sourceRoot":"","sources":["../../../../../src/store/updateCatladderStore.ts"],"names":[],"mappings":";;;AAAA,0CAA+C;AAC/C,+BAA+B;AAG/B,kDAI6B;AAC7B,+BAAiC;AAEjC,gDAA+C;AAE/C,MAAM,MAAM,GAAG;;;CAGd,CAAC;AAEF;;;GAGG;AACI,MAAM,oBAAoB,GAAG,KAAK,EACvC,MAAiD,EACjD,EAAE;;IACF,MAAM,IAAI,GAAG,MAAA,CAAC,MAAM,IAAA,qBAAU,GAAE,CAAC,mCAAI,OAAO,CAAC,GAAG,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,IAAA,6BAAkB,EAAC,IAAI,CAAC,CAAC;IACvC,MAAM,OAAO,GAAG,+BAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,IAAA,gCAAqB,EAAC,IAAI,CAAC,CAAC;IACzC,MAAM,IAAA,gBAAK,EAAC,IAAA,cAAO,EAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,MAAM,GAAG,IAAA,gBAAS,EAAC,OAAO,CAAC,CAAC,CAAC;IACnD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AAVW,QAAA,oBAAoB,wBAU/B"}

package/dist/apps/cli/src/types/types.d.ts

@@ -0,0 +1,18 @@
+export type KubernetesSecretName = string;
+export interface ISecrets {
+    [key: string]: KubernetesSecretName;
+}
+export interface IValueFile {
+    env?: {
+        public?: {
+            [key: string]: string;
+        };
+        secret?: ISecrets;
+    };
+    cloudsql?: {
+        enabled: boolean;
+        instanceId?: string;
+        region?: string;
+        projectId?: string;
+    };
+}

package/dist/apps/cli/src/types/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/apps/cli/src/types/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/types/types.ts"],"names":[],"mappings":""}

package/dist/apps/cli/src/utils/boxWithAscii.d.ts

@@ -0,0 +1 @@
+export declare const boxWithAsci: (str: string) => string;

package/dist/apps/cli/src/utils/boxWithAscii.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.boxWithAsci = void 0;
+// thx copilot
+const boxWithAsci = (str) => {
+    const length = str.length;
+    const box = "╔" + "═".repeat(length + 3) + "╗";
+    const empty = "║ " + " ".repeat(length + 1) + " ║";
+    const text = "║ " + str + " ║";
+    const bottom = "╚" + "═".repeat(length + 3) + "╝";
+    return [box, empty, text, empty, bottom].join("\n");
+};
+exports.boxWithAsci = boxWithAsci;
+//# sourceMappingURL=boxWithAscii.js.map

package/dist/apps/cli/src/utils/boxWithAscii.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"boxWithAscii.js","sourceRoot":"","sources":["../../../../../src/utils/boxWithAscii.ts"],"names":[],"mappings":";;;AAAA,cAAc;AACP,MAAM,WAAW,GAAG,CAAC,GAAW,EAAE,EAAE;IACzC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC;IAC1B,MAAM,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IAC/C,MAAM,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC;IACnD,MAAM,IAAI,GAAG,IAAI,GAAG,GAAG,GAAG,IAAI,CAAC;IAC/B,MAAM,MAAM,GAAG,GAAG,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC;IAClD,OAAO,CAAC,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACtD,CAAC,CAAC;AAPW,QAAA,WAAW,eAOtB"}

package/dist/apps/cli/src/utils/cluster.d.ts

@@ -0,0 +1,3 @@
+export declare const getCurrentContext: () => Promise<string>;
+export declare const getCurrentConnectedClusterName: () => Promise<string>;
+export declare const connectToCluster: (fullname: string) => Promise<void>;

package/dist/apps/cli/src/utils/cluster.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.connectToCluster = exports.getCurrentConnectedClusterName = exports.getCurrentContext = void 0;
+const child_process_promise_1 = require("child-process-promise");
+const getCurrentContext = async () => (await (0, child_process_promise_1.exec)(`kubectl config current-context`)).stdout.trim();
+exports.getCurrentContext = getCurrentContext;
+const getCurrentConnectedClusterName = async () => {
+    return await (0, exports.getCurrentContext)();
+};
+exports.getCurrentConnectedClusterName = getCurrentConnectedClusterName;
+const connectToCluster = async (fullname) => {
+    await (0, child_process_promise_1.exec)(`kubectl config use-context ${fullname}`);
+};
+exports.connectToCluster = connectToCluster;
+//# sourceMappingURL=cluster.js.map

package/dist/apps/cli/src/utils/cluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cluster.js","sourceRoot":"","sources":["../../../../../src/utils/cluster.ts"],"names":[],"mappings":";;;AAAA,iEAA6C;AAEtC,MAAM,iBAAiB,GAAG,KAAK,IAAI,EAAE,CAC1C,CAAC,MAAM,IAAA,4BAAI,EAAC,gCAAgC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;AADlD,QAAA,iBAAiB,qBACiC;AAExD,MAAM,8BAA8B,GAAG,KAAK,IAAI,EAAE;IACvD,OAAO,MAAM,IAAA,yBAAiB,GAAE,CAAC;AACnC,CAAC,CAAC;AAFW,QAAA,8BAA8B,kCAEzC;AAEK,MAAM,gBAAgB,GAAG,KAAK,EAAE,QAAgB,EAAE,EAAE;IACzD,MAAM,IAAA,4BAAI,EAAC,8BAA8B,QAAQ,EAAE,CAAC,CAAC;AACvD,CAAC,CAAC;AAFW,QAAA,gBAAgB,oBAE3B"}