@catladder/cli 0.0.0-main-8dbb6c76 → 0.0.0-main-a6b45abe

package/dist/packages/pipeline/src/context/getLabels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getLabels.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/getLabels.ts"],"names":[],"mappings":";;;;;;AAAA,sDAA8B;AAG9B,MAAM,QAAQ,GAAG,CAAC,KAAc,EAAE,EAAE;IAClC,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,gLAAgL;IAChL,4BAA4B;IAC5B,OAAO,IAAA,iBAAO,EAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;AACtC,CAAC,CAAC;AACK,MAAM,SAAS,GAAG,CAAC,OAAyB,EAAE,EAAE;;IACrD,MAAM,MAAM,GAAG;QACb,eAAe,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,CAAC;QAC1D,gBAAgB,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,CAAC;QACxC,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;QAChD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;QACjD,UAAU,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC;QACjC,YAAY,EACV,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU;YAC/B,CAAC,CAAC,UAAU;YACZ,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;QACvC,GAAG,CAAC,MAAA,MAAA,OAAO,CAAC,UAAU,CAAC,IAAI,0CAAE,MAAM,mCAAI,EAAE,CAAC;KAC3C,CAAC;IACF,OAAO,MAAM,CAAC;AAChB,CAAC,CAAC;AAdW,QAAA,SAAS,aAcpB"}

package/dist/packages/pipeline/src/context/getReviewSlug.d.ts

@@ -0,0 +1,4 @@
+import { type StringOrBashExpression } from "../../../bash/src/index.js";
+import type { PipelineType } from "../types";
+import type { EnvConfigWithComponent } from "../types/config";
+export declare const getReviewSlug: (envConfig: EnvConfigWithComponent, env: string, pipelineType?: PipelineType) => StringOrBashExpression | null;

package/dist/packages/pipeline/src/context/getReviewSlug.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getReviewSlug = void 0;
+const bash_1 = require("../../../bash/src/index.js");
+const bashExpressionPerPipelineType_1 = require("../bash/bashExpressionPerPipelineType");
+const getEnvType_1 = require("./getEnvType");
+const REVIEW_SLUG = {
+    default: "unknown-review-slug",
+    gitlab: new bash_1.BashExpression(`$([ -n "$CI_MERGE_REQUEST_IID" ] && echo "mr$CI_MERGE_REQUEST_IID" || { [ -n "$CI_COMMIT_REF_SLUG" ] && echo "$CI_COMMIT_REF_SLUG" || echo "unknown"; })`),
+    // CL_PR_NUMBER is injected by the github backend at the workflow level
+    github: new bash_1.BashExpression(`$([ -n "$CL_PR_NUMBER" ] && echo "pr$CL_PR_NUMBER" || echo "unknown")`),
+};
+const getReviewSlug = (envConfig, env, pipelineType) => {
+    const envType = (0, getEnvType_1.getEnvType)(env, envConfig);
+    if (envType === "review") {
+        return (0, bashExpressionPerPipelineType_1.getBashExpressionPerPipelineType)(REVIEW_SLUG, pipelineType);
+    }
+    return null; // not a review app;
+};
+exports.getReviewSlug = getReviewSlug;
+//# sourceMappingURL=getReviewSlug.js.map

package/dist/packages/pipeline/src/context/getReviewSlug.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getReviewSlug.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/getReviewSlug.ts"],"names":[],"mappings":";;;AAAA,0CAA8E;AAE9E,yFAAyF;AAGzF,6CAA0C;AAC1C,MAAM,WAAW,GAAkC;IACjD,OAAO,EAAE,qBAAqB;IAC9B,MAAM,EAAE,IAAI,qBAAc,CACxB,0JAA0J,CAC3J;IACD,uEAAuE;IACvE,MAAM,EAAE,IAAI,qBAAc,CACxB,uEAAuE,CACxE;CACF,CAAC;AAEK,MAAM,aAAa,GAAG,CAC3B,SAAiC,EACjC,GAAW,EACX,YAA2B,EACI,EAAE;IACjC,MAAM,OAAO,GAAG,IAAA,uBAAU,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,QAAQ,EAAE,CAAC;QACzB,OAAO,IAAA,gEAAgC,EAAC,WAAW,EAAE,YAAY,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,IAAI,CAAC,CAAC,oBAAoB;AACnC,CAAC,CAAC;AAVW,QAAA,aAAa,iBAUxB"}

package/dist/packages/pipeline/src/context/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./createComponentContext";
+export * from "./getEnvConfig";
+export * from "./getEnvironment";
+export * from "./getEnvironmentVariables";

package/dist/packages/pipeline/src/context/index.js

@@ -0,0 +1,21 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./createComponentContext"), exports);
+__exportStar(require("./getEnvConfig"), exports);
+__exportStar(require("./getEnvironment"), exports);
+__exportStar(require("./getEnvironmentVariables"), exports);
+//# sourceMappingURL=index.js.map

package/dist/packages/pipeline/src/context/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2DAAyC;AACzC,iDAA+B;AAC/B,mDAAiC;AACjC,4DAA0C"}

package/dist/packages/pipeline/src/context/transformJobOnlyVars.d.ts

@@ -0,0 +1,13 @@
+import type { SecretEnvVar, UnspecifiedEnvVars } from "..";
+import type { EnvVars } from "../types/config";
+/**
+ * transform EnvVars for environment.
+ *
+ * currently does not resolve references and is only used for additional job-only-vars
+ * @param vars
+ * @returns
+ */
+export declare const transformJobOnlyVars: (env: string, componentName: string, vars: EnvVars | null) => Promise<{
+    envVars: UnspecifiedEnvVars;
+    secretEnvVarKeys: SecretEnvVar[];
+}>;

package/dist/packages/pipeline/src/context/transformJobOnlyVars.js

@@ -0,0 +1,35 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.transformJobOnlyVars = void 0;
+const envVars_1 = require("./utils/envVars");
+/**
+ * transform EnvVars for environment.
+ *
+ * currently does not resolve references and is only used for additional job-only-vars
+ * @param vars
+ * @returns
+ */
+const transformJobOnlyVars = async (env, componentName, vars) => {
+    var _a;
+    if (!vars) {
+        return {
+            envVars: {},
+            secretEnvVarKeys: [],
+        };
+    }
+    const publicVars = (0, envVars_1.stringifyValues)((_a = vars === null || vars === void 0 ? void 0 : vars.public) !== null && _a !== void 0 ? _a : {});
+    const secretEnvVarKeys = (0, envVars_1.normalizeSecretVarsConfig)(vars === null || vars === void 0 ? void 0 : vars.secret);
+    const deployJobOnlySecretEnvVars = (vars === null || vars === void 0 ? void 0 : vars.secret)
+        ? (0, envVars_1.makeSecretEnvVarMapping)(env, componentName, secretEnvVarKeys)
+        : {};
+    const envVars = {
+        ...deployJobOnlySecretEnvVars,
+        ...publicVars,
+    };
+    return {
+        envVars,
+        secretEnvVarKeys,
+    };
+};
+exports.transformJobOnlyVars = transformJobOnlyVars;
+//# sourceMappingURL=transformJobOnlyVars.js.map

package/dist/packages/pipeline/src/context/transformJobOnlyVars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transformJobOnlyVars.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/context/transformJobOnlyVars.ts"],"names":[],"mappings":";;;AAEA,6CAIyB;AAEzB;;;;;;GAMG;AACI,MAAM,oBAAoB,GAAG,KAAK,EACvC,GAAW,EACX,aAAqB,EACrB,IAAoB,EAInB,EAAE;;IACH,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,OAAO;YACL,OAAO,EAAE,EAAE;YACX,gBAAgB,EAAE,EAAE;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,UAAU,GAAG,IAAA,yBAAe,EAAC,MAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,mCAAI,EAAE,CAAC,CAAC;IACvD,MAAM,gBAAgB,GAAG,IAAA,mCAAyB,EAAC,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAC,CAAC;IACjE,MAAM,0BAA0B,GAAG,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM;QAC7C,CAAC,CAAC,IAAA,iCAAuB,EAAC,GAAG,EAAE,aAAa,EAAE,gBAAgB,CAAC;QAC/D,CAAC,CAAC,EAAE,CAAC;IAEP,MAAM,OAAO,GAAG;QACd,GAAG,0BAA0B;QAC7B,GAAG,UAAU;KACd,CAAC;IACF,OAAO;QACL,OAAO;QACP,gBAAgB;KACjB,CAAC;AACJ,CAAC,CAAC;AA7BW,QAAA,oBAAoB,wBA6B/B"}

package/dist/packages/pipeline/src/context/utils/envVars.d.ts

@@ -0,0 +1,15 @@
+import type { SecretEnvVar } from "../getEnvironmentVariables";
+import type { EnvVars } from "../../types/config";
+export declare const stringifyValues: (obj: Record<string, unknown>) => {
+    [k: string]: string;
+};
+export declare const stringListToSecreteEnvVarList: (keys: string[]) => SecretEnvVar[];
+/**
+ * normalizes both config forms of vault-stored env vars: the deprecated
+ * plain string[] (all keys secret) and the record form carrying a kind
+ * (or config object) per key
+ */
+export declare const normalizeSecretVarsConfig: (secret: EnvVars["secret"]) => SecretEnvVar[];
+export declare const makeSecretEnvVarMapping: (env: string, componentName: string, secretEnvVars: SecretEnvVar[]) => {
+    [k: string]: import("../../../../bash/src/index.js").BashExpression;
+};

package/dist/packages/pipeline/src/context/utils/envVars.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.makeSecretEnvVarMapping = exports.normalizeSecretVarsConfig = exports.stringListToSecreteEnvVarList = exports.stringifyValues = void 0;
+const lodash_es_1 = require("lodash-es");
+const getEnvironmentVariables_1 = require("../getEnvironmentVariables");
+const bash_1 = require("../../../../bash/src/index.js");
+const stringifyValues = (obj) => Object.fromEntries(Object.entries(obj).map(([key, value]) => [
+    key,
+    (0, lodash_es_1.isObject)(value) ? JSON.stringify(value) : `${value}`,
+]));
+exports.stringifyValues = stringifyValues;
+const stringListToSecreteEnvVarList = (keys) => keys.map((key) => ({ key }));
+exports.stringListToSecreteEnvVarList = stringListToSecreteEnvVarList;
+/**
+ * normalizes both config forms of vault-stored env vars: the deprecated
+ * plain string[] (all keys secret) and the record form carrying a kind
+ * (or config object) per key
+ */
+const normalizeSecretVarsConfig = (secret) => {
+    if (!secret) {
+        return [];
+    }
+    if (Array.isArray(secret)) {
+        return (0, exports.stringListToSecreteEnvVarList)(secret);
+    }
+    return Object.entries(secret).map(([key, config]) => typeof config === "string" ? { key, kind: config } : { key, ...config });
+};
+exports.normalizeSecretVarsConfig = normalizeSecretVarsConfig;
+const makeSecretEnvVarMapping = (env, componentName, secretEnvVars) => {
+    return Object.fromEntries(secretEnvVars.map(({ key }) => [
+        key,
+        (0, bash_1.getBashVariable)((0, getEnvironmentVariables_1.getSecretVarName)(env, componentName, key)),
+    ]));
+};
+exports.makeSecretEnvVarMapping = makeSecretEnvVarMapping;
+//# sourceMappingURL=envVars.js.map

package/dist/packages/pipeline/src/context/utils/envVars.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"envVars.js","sourceRoot":"","sources":["../../../../../../../../packages/pipeline/src/context/utils/envVars.ts"],"names":[],"mappings":";;;AAAA,yCAAqC;AAErC,wEAA8D;AAC9D,0CAAkD;AAG3C,MAAM,eAAe,GAAG,CAAC,GAA4B,EAAE,EAAE,CAC9D,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC;IACxC,GAAG;IACH,IAAA,oBAAQ,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,KAAK,EAAE;CACrD,CAAC,CACH,CAAC;AANS,QAAA,eAAe,mBAMxB;AAEG,MAAM,6BAA6B,GAAG,CAAC,IAAc,EAAkB,EAAE,CAC9E,IAAI,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC;AADlB,QAAA,6BAA6B,iCACX;AAE/B;;;;GAIG;AACI,MAAM,yBAAyB,GAAG,CACvC,MAAyB,EACT,EAAE;IAClB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAA,qCAA6B,EAAC,MAAM,CAAC,CAAC;IAC/C,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,EAAE,CAClD,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,MAAM,EAAE,CACxE,CAAC;AACJ,CAAC,CAAC;AAZW,QAAA,yBAAyB,6BAYpC;AACK,MAAM,uBAAuB,GAAG,CACrC,GAAW,EACX,aAAqB,EACrB,aAA6B,EAC7B,EAAE;IACF,OAAO,MAAM,CAAC,WAAW,CACvB,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC;QAC7B,GAAG;QACH,IAAA,sBAAe,EAAC,IAAA,0CAAgB,EAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,CAAC;KAC3D,CAAC,CACH,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,uBAAuB,2BAWlC"}

package/dist/packages/pipeline/src/customImages/hash.d.ts

@@ -0,0 +1,24 @@
+/**
+ * input for content-hashing an image definition. `extraDirs` covers
+ * image definitions that include other image dirs (dockerfile INCLUDE).
+ */
+export type ImageHashConfig = {
+    dir: string;
+    extraDirs?: string[];
+    hashExtraPaths?: string[];
+    buildArgs?: Record<string, string>;
+};
+export type CustomImageHashResult = {
+    hash: string;
+    watchedPaths: string[];
+};
+export declare function computeCustomImageHash(config: ImageHashConfig): CustomImageHashResult;
+/**
+ * the hash of an image defined by an inline Dockerfile: its content
+ * stands in for the definition dir. The build context is deliberately
+ * NOT hashed (it may be the whole repository) — `hashExtraPaths` is how
+ * context files opt into the hash.
+ */
+export declare function computeInlineImageHash(config: Pick<ImageHashConfig, "hashExtraPaths" | "buildArgs"> & {
+    dockerfileContent: string;
+}): CustomImageHashResult;

package/dist/packages/pipeline/src/customImages/hash.js

@@ -0,0 +1,90 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeInlineImageHash = exports.computeCustomImageHash = void 0;
+const crypto_1 = require("crypto");
+const fs_1 = require("fs");
+const path_1 = require("path");
+const IGNORED_FILES = new Set([".DS_Store", "Thumbs.db"]);
+const isIgnoredFile = (path) => { var _a; return IGNORED_FILES.has((_a = path.split("/").pop()) !== null && _a !== void 0 ? _a : ""); };
+function listFilesRecursive(dir) {
+    const resolved = (0, path_1.resolve)(dir);
+    const entries = (0, fs_1.readdirSync)(resolved, { recursive: true, encoding: "utf-8" });
+    return entries
+        .filter((entry) => {
+        if (isIgnoredFile(entry)) {
+            // OS junk files exist locally but not in CI checkouts — they
+            // must never influence the content hash
+            return false;
+        }
+        const fullPath = (0, path_1.join)(resolved, entry);
+        return (0, fs_1.statSync)(fullPath).isFile();
+    })
+        .sort();
+}
+/**
+ * the parts every image definition hashes on top of its content:
+ * files outside the definition, and the build args
+ */
+function hashExtras(hash, config) {
+    const watchedPaths = [];
+    // Hash extra paths (for files outside the dir)
+    if (config.hashExtraPaths) {
+        // Extra paths are literal file paths (not globs) for simplicity
+        const extraFiles = [...config.hashExtraPaths].sort();
+        for (const file of extraFiles) {
+            hash.update(file);
+            hash.update((0, fs_1.readFileSync)(file));
+        }
+        watchedPaths.push(...config.hashExtraPaths);
+    }
+    // Hash build args (sorted keys for determinism)
+    if (config.buildArgs) {
+        const sorted = Object.entries(config.buildArgs).sort(([a], [b]) => a.localeCompare(b));
+        hash.update(JSON.stringify(sorted));
+    }
+    return watchedPaths;
+}
+function computeCustomImageHash(config) {
+    var _a;
+    const hash = (0, crypto_1.createHash)("sha256");
+    const watchedPaths = [];
+    // Hash all files in the dir (includes the Dockerfile and any context files)
+    const dirFiles = listFilesRecursive(config.dir);
+    for (const file of dirFiles) {
+        const fullPath = (0, path_1.join)((0, path_1.resolve)(config.dir), file);
+        hash.update(file); // include relative path for disambiguation
+        hash.update((0, fs_1.readFileSync)(fullPath));
+    }
+    watchedPaths.push(`${config.dir}/**/*`);
+    // extra dirs (e.g. included base image definitions)
+    for (const extraDir of (_a = config.extraDirs) !== null && _a !== void 0 ? _a : []) {
+        for (const file of listFilesRecursive(extraDir)) {
+            hash.update(file);
+            hash.update((0, fs_1.readFileSync)((0, path_1.join)((0, path_1.resolve)(extraDir), file)));
+        }
+        watchedPaths.push(`${extraDir}/**/*`);
+    }
+    watchedPaths.push(...hashExtras(hash, config));
+    return {
+        hash: hash.digest("hex").slice(0, 12),
+        watchedPaths,
+    };
+}
+exports.computeCustomImageHash = computeCustomImageHash;
+/**
+ * the hash of an image defined by an inline Dockerfile: its content
+ * stands in for the definition dir. The build context is deliberately
+ * NOT hashed (it may be the whole repository) — `hashExtraPaths` is how
+ * context files opt into the hash.
+ */
+function computeInlineImageHash(config) {
+    const hash = (0, crypto_1.createHash)("sha256");
+    hash.update(config.dockerfileContent);
+    const watchedPaths = hashExtras(hash, config);
+    return {
+        hash: hash.digest("hex").slice(0, 12),
+        watchedPaths,
+    };
+}
+exports.computeInlineImageHash = computeInlineImageHash;
+//# sourceMappingURL=hash.js.map

package/dist/packages/pipeline/src/customImages/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/customImages/hash.ts"],"names":[],"mappings":";;;AACA,mCAAoC;AACpC,2BAAyD;AACzD,+BAAqC;AAiBrC,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,CAAC,CAAC,CAAC;AAC1D,MAAM,aAAa,GAAG,CAAC,IAAY,EAAE,EAAE,WACrC,OAAA,aAAa,CAAC,GAAG,CAAC,MAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,mCAAI,EAAE,CAAC,CAAA,EAAA,CAAC;AAEjD,SAAS,kBAAkB,CAAC,GAAW;IACrC,MAAM,QAAQ,GAAG,IAAA,cAAO,EAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,IAAA,gBAAW,EAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;IAC9E,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;QAChB,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACzB,6DAA6D;YAC7D,wCAAwC;YACxC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACvC,OAAO,IAAA,aAAQ,EAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,CAAC;IACrC,CAAC,CAAC;SACD,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;GAGG;AACH,SAAS,UAAU,CACjB,IAAU,EACV,MAA6D;IAE7D,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,+CAA+C;IAC/C,IAAI,MAAM,CAAC,cAAc,EAAE,CAAC;QAC1B,gEAAgE;QAChE,MAAM,UAAU,GAAG,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC,IAAI,EAAE,CAAC;QACrD,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAA,iBAAY,EAAC,IAAI,CAAC,CAAC,CAAC;QAClC,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,cAAc,CAAC,CAAC;IAC9C,CAAC;IAED,gDAAgD;IAChD,IAAI,MAAM,CAAC,SAAS,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAChE,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CACnB,CAAC;QACF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACtC,CAAC;IAED,OAAO,YAAY,CAAC;AACtB,CAAC;AAED,SAAgB,sBAAsB,CACpC,MAAuB;;IAEvB,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,YAAY,GAAa,EAAE,CAAC;IAElC,4EAA4E;IAC5E,MAAM,QAAQ,GAAG,kBAAkB,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAEhD,KAAK,MAAM,IAAI,IAAI,QAAQ,EAAE,CAAC;QAC5B,MAAM,QAAQ,GAAG,IAAA,WAAI,EAAC,IAAA,cAAO,EAAC,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;QACjD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,2CAA2C;QAC9D,IAAI,CAAC,MAAM,CAAC,IAAA,iBAAY,EAAC,QAAQ,CAAC,CAAC,CAAC;IACtC,CAAC;IACD,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,OAAO,CAAC,CAAC;IAExC,oDAAoD;IACpD,KAAK,MAAM,QAAQ,IAAI,MAAA,MAAM,CAAC,SAAS,mCAAI,EAAE,EAAE,CAAC;QAC9C,KAAK,MAAM,IAAI,IAAI,kBAAkB,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAClB,IAAI,CAAC,MAAM,CAAC,IAAA,iBAAY,EAAC,IAAA,WAAI,EAAC,IAAA,cAAO,EAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3D,CAAC;QACD,YAAY,CAAC,IAAI,CAAC,GAAG,QAAQ,OAAO,CAAC,CAAC;IACxC,CAAC;IAED,YAAY,CAAC,IAAI,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAE/C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACrC,YAAY;KACb,CAAC;AACJ,CAAC;AA/BD,wDA+BC;AAED;;;;;GAKG;AACH,SAAgB,sBAAsB,CACpC,MAEC;IAED,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;IACtC,MAAM,YAAY,GAAG,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAE9C,OAAO;QACL,IAAI,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACrC,YAAY;KACb,CAAC;AACJ,CAAC;AAbD,wDAaC"}

package/dist/packages/pipeline/src/customImages/jobImagesPlan.d.ts

@@ -0,0 +1,75 @@
+import type { CatladderImageRef } from "../runner";
+import type { GitlabJobImage, PipelineType } from "../types";
+import type { CatladderJob, CatladderJobNeed } from "../types/jobs";
+import type { ProjectImageConfig, ProjectImageRef } from "./projectImages";
+export declare const GENERATED_IMAGES_FOLDER = ".catladder-generated/images";
+export type ResolvedJobImage = {
+    /** the concrete image url */
+    image: string;
+    /** the dependency on the image build job */
+    need?: CatladderJobNeed;
+    /** whether the image lives in the repository's own registry */
+    fromRepoRegistry?: boolean;
+};
+export type GeneratedImageFile = {
+    path: string;
+    content: string;
+};
+/**
+ * where inline project Dockerfiles are materialized — a subfolder, so a
+ * project image can carry the same name as a shipped one
+ */
+export declare const PROJECT_IMAGES_FOLDER = ".catladder-generated/images/project";
+/**
+ * plans the catladder job images of one backend run: resolves image
+ * references, collects the image build jobs, and the image definitions
+ * to materialize into the generated files. Each referenced catladder
+ * image is built in the repository's own registry from the definition
+ * shipped with catladder.
+ *
+ * Reference-driven: only images actually used by a job are built.
+ */
+export declare class JobImagesPlan {
+    private readonly pipelineType;
+    private readonly projectImages;
+    private used;
+    private usedProject;
+    constructor(pipelineType: PipelineType, projectImages?: Record<string, ProjectImageConfig>);
+    /**
+     * resolves a job image (marker or concrete) to a concrete image url
+     * plus the build job dependency
+     */
+    resolve(image: CatladderJob["image"]): {
+        image: GitlabJobImage | undefined;
+        need?: CatladderJobNeed;
+        fromRepoRegistry?: boolean;
+    };
+    resolveRef(ref: CatladderImageRef): ResolvedJobImage;
+    resolveProjectRef(ref: ProjectImageRef): ResolvedJobImage;
+    /**
+     * the registry image prefix. On github, container images can't use
+     * runtime env vars — the expression form is required.
+     */
+    private registryImageRef;
+    private useProject;
+    /**
+     * the source-dependent half of a project image: an inline Dockerfile
+     * is materialized into the generated files and hashed by its content,
+     * a directory is hashed and watched in place
+     */
+    private planProjectSource;
+    private use;
+    /**
+     * the image build jobs for all used images
+     */
+    getEnsureJobs(): CatladderJob[];
+    private createImageBuildJob;
+    /**
+     * the image definitions to materialize into the generated files (so
+     * pipelines build from committed, reviewable files and gitlab's
+     * rules:changes can watch them): the definitions catladder ships and
+     * the project's inline Dockerfiles. A project image directory is
+     * already committed and contributes nothing.
+     */
+    getGeneratedFiles(): GeneratedImageFile[];
+}