@catladder/cli 0.0.0-main-8dbb6c76 → 0.0.0-main-a6b45abe

package/dist/apps/cli/src/apps/cli/commands/project/setup/setupKubernetes.js

@@ -0,0 +1,115 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setupKubernetes = void 0;
+const pipeline_1 = require("../../../../../../../../packages/pipeline/src/index.js");
+const child_process_promise_1 = require("child-process-promise");
+const cluster_1 = require("../../../../../utils/cluster");
+const gitlab_1 = require("../../../../../utils/gitlab");
+const ensureNamespace_1 = __importDefault(require("../utils/ensureNamespace"));
+const setupKubernetes = async (instance, context) => {
+    var _a;
+    const deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
+    if (!(0, pipeline_1.isOfDeployType)(deployConfig, "kubernetes")) {
+        throw new Error("cannot run setupKubernetes on non-kubernetes deployments");
+    }
+    const { id: projectId } = await (0, gitlab_1.getProjectInfo)(instance);
+    const deploy_tokens = await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/deploy_tokens`);
+    if (!deploy_tokens.find((v) => v.name === "gitlab-deploy-token")) {
+        instance.log("I will setup the 'GitLab Deploy Token', so Kubernetes can pull images from this project.");
+        await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}/deploy_tokens`, {
+            id: projectId,
+            name: "gitlab-deploy-token",
+            scopes: ["read_registry"],
+        }, "POST");
+    }
+    const fullName = (0, pipeline_1.getFullKubernetesClusterName)(deployConfig.cluster);
+    instance.log(`cluster: ${fullName}`);
+    await (0, cluster_1.connectToCluster)(fullName);
+    instance.log("");
+    instance.log("ensuring namespace ...");
+    const namespace = await (0, ensureNamespace_1.default)(context);
+    instance.log("Namespace " + namespace + " created / updated!");
+    instance.log("");
+    //$.verbose = true;
+    // we name the service account and the role and the role binding with the same name
+    // we currently create one per component to better separate them
+    instance.log("ensuring service accounts...");
+    const serviceAccountName = `cl-${context.name}-deploy`;
+    const KUBE_URL = await (0, child_process_promise_1.exec)(`TERM=dumb kubectl cluster-info | grep -E 'Kubernetes master|Kubernetes control plane' | awk '/http/ {print $NF}'`).then((s) => s.stdout.trim());
+    // first upsert service acount in the ns
+    try {
+        await (0, child_process_promise_1.exec)(`kubectl delete serviceaccount --namespace ${namespace} ${serviceAccountName}`);
+        await (0, child_process_promise_1.exec)(`kubectl delete rolebinding --namespace ${namespace} ${serviceAccountName}`);
+        await (0, child_process_promise_1.exec)(`kubectl delete role --namespace ${namespace} ${serviceAccountName}`);
+    }
+    catch (e) {
+        // ignore
+    }
+    await (0, child_process_promise_1.exec)(`kubectl create serviceaccount --namespace ${namespace} ${serviceAccountName}`);
+    // upsert role in the ns
+    await (0, child_process_promise_1.exec)(`cat <<EOF | kubectl apply -f -
+kind: Role
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  namespace: ${namespace}
+  name: ${serviceAccountName}
+rules:
+- apiGroups: ["", "extensions", "apps", "networking.k8s.io", "batch", "autoscaling", "rbac.authorization.k8s.io","snapshot.storage.k8s.io"]
+  resources: ["deployments", "replicasets", "statefulsets", "pods", "secrets", "configmaps", "services", "ingresses", "serviceaccounts", "roles", "rolebindings", "jobs", "cronjobs", "horizontalpodautoscalers", "persistentvolumeclaims", "volumesnapshots"]
+  verbs: ["*"]
+---
+kind: RoleBinding
+apiVersion: rbac.authorization.k8s.io/v1
+metadata:
+  name: ${serviceAccountName}
+  namespace: ${namespace}
+subjects:
+  - kind: ServiceAccount
+    name: ${serviceAccountName}
+    namespace:  ${namespace}
+roleRef:
+  kind: Role
+  name: ${serviceAccountName}
+  apiGroup: rbac.authorization.k8s.io
+EOF
+`);
+    const secretName = `${serviceAccountName}-secret`;
+    // create token for the service account
+    await (0, child_process_promise_1.exec)(`
+kubectl apply -f - <<EOF
+apiVersion: v1
+kind: Secret
+metadata:
+  name: ${secretName}
+  namespace: ${namespace}
+  annotations:
+    kubernetes.io/service-account.name: ${serviceAccountName}
+type: kubernetes.io/service-account-token
+EOF
+  `);
+    const KUBE_CA_PEM = await (0, child_process_promise_1.exec)(`kubectl get secret ${secretName} --namespace ${namespace} -o jsonpath="{['data']['ca\\.crt']}"`).then((c) => c.stdout.trim());
+    const KUBE_TOKEN = await (0, child_process_promise_1.exec)(`kubectl get secret ${secretName} --namespace ${namespace} -o jsonpath="{['data']['token']}" | base64 --decode`).then((c) => c.stdout.trim());
+    const vars = {
+        KUBE_TOKEN,
+        KUBE_CA_PEM,
+        KUBE_URL,
+    };
+    const missing = Object.entries(vars).filter((e) => !e[1]);
+    if (missing.length > 0) {
+        throw new Error("could not setup credentials. Missing vars: " +
+            missing.map((m) => m[0]).join(", ") +
+            ". Check whether your local kubectl is still working for '" +
+            fullName +
+            "'");
+    }
+    instance.log("service accounts created / updated!");
+    instance.log("");
+    instance.log("pusing secrets to gitlab...");
+    await (0, gitlab_1.upsertAllVariables)(instance, vars, context.env, context.name, false);
+    instance.log("done!");
+};
+exports.setupKubernetes = setupKubernetes;
+//# sourceMappingURL=setupKubernetes.js.map

package/dist/apps/cli/src/apps/cli/commands/project/setup/setupKubernetes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupKubernetes.js","sourceRoot":"","sources":["../../../../../../../../../src/apps/cli/commands/project/setup/setupKubernetes.ts"],"names":[],"mappings":";;;;;;AACA,kDAG6B;AAE7B,iEAA6C;AAC7C,0DAAgE;AAChE,wDAIqC;AACrC,+EAAuD;AAEhD,MAAM,eAAe,GAAG,KAAK,EAClC,QAAY,EACZ,OAAyB,EACzB,EAAE;;IACF,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC;IAC5C,IAAI,CAAC,IAAA,yBAAc,EAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;IAC9E,CAAC;IAED,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,uBAAc,EAAC,QAAQ,CAAC,CAAC;IACzD,MAAM,aAAa,GAAG,MAAM,IAAA,wBAAe,EACzC,QAAQ,EACR,YAAY,SAAS,gBAAgB,CACtC,CAAC;IAEF,IACE,CAAC,aAAa,CAAC,IAAI,CACjB,CAAC,CAAmB,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,qBAAqB,CAC1D,EACD,CAAC;QACD,QAAQ,CAAC,GAAG,CACV,0FAA0F,CAC3F,CAAC;QAEF,MAAM,IAAA,wBAAe,EACnB,QAAQ,EACR,YAAY,SAAS,gBAAgB,EACrC;YACE,EAAE,EAAE,SAAS;YACb,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,CAAC,eAAe,CAAC;SAC1B,EACD,MAAM,CACP,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAA,uCAA4B,EAAC,YAAY,CAAC,OAAO,CAAC,CAAC;IACpE,QAAQ,CAAC,GAAG,CAAC,YAAY,QAAQ,EAAE,CAAC,CAAC;IAErC,MAAM,IAAA,0BAAgB,EAAC,QAAQ,CAAC,CAAC;IACjC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,GAAG,CAAC,wBAAwB,CAAC,CAAC;IACvC,MAAM,SAAS,GAAG,MAAM,IAAA,yBAAe,EAAC,OAAO,CAAC,CAAC;IACjD,QAAQ,CAAC,GAAG,CAAC,YAAY,GAAG,SAAS,GAAG,qBAAqB,CAAC,CAAC;IAC/D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,mBAAmB;IAEnB,mFAAmF;IACnF,gEAAgE;IAChE,QAAQ,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAC;IAC7C,MAAM,kBAAkB,GAAG,MAAM,OAAO,CAAC,IAAI,SAAS,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,IAAA,4BAAI,EACzB,kHAAkH,CACnH,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/B,wCAAwC;IACxC,IAAI,CAAC;QACH,MAAM,IAAA,4BAAI,EACR,6CAA6C,SAAS,IAAI,kBAAkB,EAAE,CAC/E,CAAC;QACF,MAAM,IAAA,4BAAI,EACR,0CAA0C,SAAS,IAAI,kBAAkB,EAAE,CAC5E,CAAC;QACF,MAAM,IAAA,4BAAI,EACR,mCAAmC,SAAS,IAAI,kBAAkB,EAAE,CACrE,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,SAAS;IACX,CAAC;IAED,MAAM,IAAA,4BAAI,EACR,6CAA6C,SAAS,IAAI,kBAAkB,EAAE,CAC/E,CAAC;IAEF,wBAAwB;IAExB,MAAM,IAAA,4BAAI,EAAC;;;;eAIE,SAAS;UACd,kBAAkB;;;;;;;;;UASlB,kBAAkB;eACb,SAAS;;;YAGZ,kBAAkB;kBACZ,SAAS;;;UAGjB,kBAAkB;;;CAG3B,CAAC,CAAC;IAED,MAAM,UAAU,GAAG,GAAG,kBAAkB,SAAS,CAAC;IAClD,uCAAuC;IACvC,MAAM,IAAA,4BAAI,EAAC;;;;;UAKH,UAAU;eACL,SAAS;;0CAEkB,kBAAkB;;;GAGzD,CAAC,CAAC;IAEH,MAAM,WAAW,GAAG,MAAM,IAAA,4BAAI,EAC5B,sBAAsB,UAAU,gBAAgB,SAAS,uCAAuC,CACjG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,MAAM,UAAU,GAAG,MAAM,IAAA,4BAAI,EAC3B,sBAAsB,UAAU,gBAAgB,SAAS,sDAAsD,CAChH,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAE/B,MAAM,IAAI,GAAG;QACX,UAAU;QACV,WAAW;QACX,QAAQ;KACT,CAAC;IAEF,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,KAAK,CACb,6CAA6C;YAC3C,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;YACnC,2DAA2D;YAC3D,QAAQ;YACR,GAAG,CACN,CAAC;IACJ,CAAC;IAED,QAAQ,CAAC,GAAG,CAAC,qCAAqC,CAAC,CAAC;IAEpD,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACjB,QAAQ,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;IAE5C,MAAM,IAAA,2BAAkB,EACtB,QAAQ,EACR,IAAI,EACJ,OAAO,CAAC,GAAG,EACX,OAAO,CAAC,IAAI,EACZ,KAAK,CACN,CAAC;IACF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AACxB,CAAC,CAAC;AA3JW,QAAA,eAAe,mBA2J1B"}

package/dist/apps/cli/src/apps/cli/commands/project/setup/setupTopic.d.ts

@@ -0,0 +1,2 @@
+import type { IO } from "../../../../../core/types";
+export declare const setupTopic: (instance: IO) => Promise<void>;

package/dist/apps/cli/src/apps/cli/commands/project/setup/setupTopic.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setupTopic = void 0;
+const gitlab_1 = require("../../../../../utils/gitlab");
+const catladderTopic = "catladder";
+const setupTopic = async (instance) => {
+    const { id: projectId } = await (0, gitlab_1.getProjectInfo)(instance);
+    const { topics } = await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}`);
+    await (0, gitlab_1.doGitlabRequest)(instance, `projects/${projectId}`, { topics: [catladderTopic, ...topics] }, "PUT");
+};
+exports.setupTopic = setupTopic;
+//# sourceMappingURL=setupTopic.js.map

package/dist/apps/cli/src/apps/cli/commands/project/setup/setupTopic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setupTopic.js","sourceRoot":"","sources":["../../../../../../../../../src/apps/cli/commands/project/setup/setupTopic.ts"],"names":[],"mappings":";;;AACA,wDAA8E;AAE9E,MAAM,cAAc,GAAG,WAAW,CAAC;AAE5B,MAAM,UAAU,GAAG,KAAK,EAAE,QAAY,EAAE,EAAE;IAC/C,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,IAAA,uBAAc,EAAC,QAAQ,CAAC,CAAC;IAEzD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,wBAAe,EAAC,QAAQ,EAAE,YAAY,SAAS,EAAE,CAAC,CAAC;IAE5E,MAAM,IAAA,wBAAe,EACnB,QAAQ,EACR,YAAY,SAAS,EAAE,EACvB,EAAE,MAAM,EAAE,CAAC,cAAc,EAAE,GAAG,MAAM,CAAC,EAAE,EACvC,KAAK,CACN,CAAC;AACJ,CAAC,CAAC;AAXW,QAAA,UAAU,cAWrB"}

package/dist/apps/cli/src/apps/cli/commands/project/utils/autocompletions.d.ts

@@ -0,0 +1,4 @@
+export declare const allEnvs: () => Promise<string[]>;
+export declare const allComponents: () => Promise<string[]>;
+export declare const envAndComponents: () => Promise<string[]>;
+export declare const allEnvsAndAllComponents: () => Promise<string[]>;

package/dist/apps/cli/src/apps/cli/commands/project/utils/autocompletions.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.allEnvsAndAllComponents = exports.envAndComponents = exports.allComponents = exports.allEnvs = void 0;
+const pipeline_1 = require("../../../../../../../../packages/pipeline/src/index.js");
+const getProjectConfig_1 = require("../../../../../config/getProjectConfig");
+const allEnvs = async () => {
+    const config = await (0, getProjectConfig_1.getProjectConfig)();
+    if (!config) {
+        return [];
+    }
+    return (0, pipeline_1.getAllEnvsInAllComponents)(config);
+};
+exports.allEnvs = allEnvs;
+const allComponents = async () => {
+    const config = await (0, getProjectConfig_1.getProjectConfig)();
+    if (!config) {
+        return [];
+    }
+    return Object.keys(config.components);
+};
+exports.allComponents = allComponents;
+const envAndComponents = async () => {
+    const allEnvAndcomponents = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsFlat)();
+    return allEnvAndcomponents.reduce((acc, { env, componentName }) => [...acc, env + ":" + componentName], []);
+};
+exports.envAndComponents = envAndComponents;
+const allEnvsAndAllComponents = async () => {
+    return [...(await (0, exports.allEnvs)()), ...(await (0, exports.envAndComponents)())];
+};
+exports.allEnvsAndAllComponents = allEnvsAndAllComponents;
+//# sourceMappingURL=autocompletions.js.map

package/dist/apps/cli/src/apps/cli/commands/project/utils/autocompletions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"autocompletions.js","sourceRoot":"","sources":["../../../../../../../../../src/apps/cli/commands/project/utils/autocompletions.ts"],"names":[],"mappings":";;;AAAA,kDAA4E;AAC5E,6EAGgD;AAEzC,MAAM,OAAO,GAAG,KAAK,IAAI,EAAE;IAChC,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAgB,GAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,IAAA,oCAAyB,EAAC,MAAM,CAAC,CAAC;AAC3C,CAAC,CAAC;AANW,QAAA,OAAO,WAMlB;AAEK,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;IACtC,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAgB,GAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;AACxC,CAAC,CAAC;AAPW,QAAA,aAAa,iBAOxB;AAEK,MAAM,gBAAgB,GAAG,KAAK,IAAI,EAAE;IACzC,MAAM,mBAAmB,GAAG,MAAM,IAAA,kDAA+B,GAAE,CAAC;IAEpE,OAAO,mBAAmB,CAAC,MAAM,CAC/B,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,EAAE,GAAG,GAAG,GAAG,GAAG,aAAa,CAAC,EACpE,EAAE,CACH,CAAC;AACJ,CAAC,CAAC;AAPW,QAAA,gBAAgB,oBAO3B;AAEK,MAAM,uBAAuB,GAAG,KAAK,IAAI,EAAE;IAChD,OAAO,CAAC,GAAG,CAAC,MAAM,IAAA,eAAO,GAAE,CAAC,EAAE,GAAG,CAAC,MAAM,IAAA,wBAAgB,GAAE,CAAC,CAAC,CAAC;AAC/D,CAAC,CAAC;AAFW,QAAA,uBAAuB,2BAElC"}

package/dist/apps/cli/src/apps/cli/commands/project/utils/ensureCluster.d.ts

@@ -0,0 +1,9 @@
+import type { IO } from "../../../../../core/types";
+/**
+ * Ensures the user is connected to the correct Kubernetes cluster for the given envComponent.
+ * If already connected, does nothing. If not, prompts for confirmation to switch (in interactive mode).
+ *
+ * Accepts an IO instance for logging and prompting.
+ * Also works with Vorpal's CommandInstance via .call(this, envComponent) for backward compatibility.
+ */
+export declare function ensureCluster(io: IO, envComponent: string): Promise<void>;

package/dist/apps/cli/src/apps/cli/commands/project/utils/ensureCluster.js

@@ -0,0 +1,37 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureCluster = void 0;
+const pipeline_1 = require("../../../../../../../../packages/pipeline/src/index.js");
+const getProjectConfig_1 = require("../../../../../config/getProjectConfig");
+const cluster_1 = require("../../../../../utils/cluster");
+/**
+ * Ensures the user is connected to the correct Kubernetes cluster for the given envComponent.
+ * If already connected, does nothing. If not, prompts for confirmation to switch (in interactive mode).
+ *
+ * Accepts an IO instance for logging and prompting.
+ * Also works with Vorpal's CommandInstance via .call(this, envComponent) for backward compatibility.
+ */
+async function ensureCluster(io, envComponent) {
+    var _a, _b;
+    const { env, componentName } = (0, getProjectConfig_1.parseChoice)(envComponent);
+    const context = await (0, getProjectConfig_1.getPipelineContextByChoice)(env, componentName);
+    if (!(0, pipeline_1.isOfDeployType)((_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config, "kubernetes")) {
+        throw new Error("can't ensure cluster for non-kubernetes deployments");
+    }
+    const cluster = (0, pipeline_1.getFullKubernetesClusterName)((_b = context.deploy) === null || _b === void 0 ? void 0 : _b.config.cluster);
+    const connectedClusterName = await (0, cluster_1.getCurrentConnectedClusterName)();
+    if (cluster !== connectedClusterName) {
+        io.log(`you are currently connected to cluster '${connectedClusterName}'`);
+        io.log(`but the project requires cluster '${cluster}'`);
+        const shouldContinue = await io.confirm(`Do you want to connect to '${cluster}'?`);
+        if (!shouldContinue) {
+            io.log("abort");
+        }
+        else {
+            await (0, cluster_1.connectToCluster)(cluster);
+            io.log(`connected to cluster '${cluster}'`);
+        }
+    }
+}
+exports.ensureCluster = ensureCluster;
+//# sourceMappingURL=ensureCluster.js.map

package/dist/apps/cli/src/apps/cli/commands/project/utils/ensureCluster.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensureCluster.js","sourceRoot":"","sources":["../../../../../../../../../src/apps/cli/commands/project/utils/ensureCluster.ts"],"names":[],"mappings":";;;AAAA,kDAG6B;AAC7B,6EAGgD;AAChD,0DAGsC;AAGtC;;;;;;GAMG;AACI,KAAK,UAAU,aAAa,CACjC,EAAM,EACN,YAAoB;;IAEpB,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,IAAA,8BAAW,EAAC,YAAY,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,MAAM,IAAA,6CAA0B,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IACrE,IAAI,CAAC,IAAA,yBAAc,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,MAAM,OAAO,GAAG,IAAA,uCAA4B,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC7E,MAAM,oBAAoB,GAAG,MAAM,IAAA,wCAA8B,GAAE,CAAC;IAEpE,IAAI,OAAO,KAAK,oBAAoB,EAAE,CAAC;QACrC,EAAE,CAAC,GAAG,CAAC,2CAA2C,oBAAoB,GAAG,CAAC,CAAC;QAC3E,EAAE,CAAC,GAAG,CAAC,qCAAqC,OAAO,GAAG,CAAC,CAAC;QACxD,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,OAAO,CACrC,8BAA8B,OAAO,IAAI,CAC1C,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAClB,CAAC;aAAM,CAAC;YACN,MAAM,IAAA,0BAAgB,EAAC,OAAO,CAAC,CAAC;YAChC,EAAE,CAAC,GAAG,CAAC,yBAAyB,OAAO,GAAG,CAAC,CAAC;QAC9C,CAAC;IACH,CAAC;AACH,CAAC;AAzBD,sCAyBC"}

package/dist/apps/cli/src/apps/cli/commands/project/utils/ensureNamespace.d.ts

@@ -0,0 +1,2 @@
+import type { ComponentContext } from "../../../../../../../../packages/pipeline/src/index.js";
+export default function (context: ComponentContext): Promise<string>;

package/dist/apps/cli/src/apps/cli/commands/project/utils/ensureNamespace.js

@@ -0,0 +1,38 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const pipeline_1 = require("../../../../../../../../packages/pipeline/src/index.js");
+const client_node_1 = require("@kubernetes/client-node");
+const k8sApi_1 = require("../../../../../k8sApi");
+async function default_1(context) {
+    var _a, _b, _c, _d, _e;
+    const namespace = (0, pipeline_1.getKubernetesNamespace)(context.fullConfig, context.env);
+    const namespaceBody = new client_node_1.V1Namespace();
+    const metadata = {
+        name: namespace,
+        labels: {
+            customerName: context.fullConfig.customerName,
+            appName: context.fullConfig.appName,
+            environment: context.env,
+            components: Object.keys(context.fullConfig.components).join("_"), // limited chars available...
+            ...((_b = (_a = context.fullConfig.meta) === null || _a === void 0 ? void 0 : _a.labels) !== null && _b !== void 0 ? _b : {}),
+        },
+    };
+    namespaceBody.metadata = metadata;
+    const k8sApi = (0, k8sApi_1.getk8sApi)();
+    try {
+        await k8sApi.readNamespace(namespace);
+        await k8sApi.patchNamespace(namespace, namespaceBody, undefined, undefined, undefined, undefined, { headers: { "content-type": "application/merge-patch+json" } }); // update meta data
+    }
+    catch (e) {
+        if (((_d = (_c = e.response) === null || _c === void 0 ? void 0 : _c.body) === null || _d === void 0 ? void 0 : _d.reason) === "NotFound") {
+            await k8sApi.createNamespace(namespaceBody);
+        }
+        else {
+            console.error((_e = e.response) === null || _e === void 0 ? void 0 : _e.body);
+            throw e;
+        }
+    }
+    return namespace;
+}
+exports.default = default_1;
+//# sourceMappingURL=ensureNamespace.js.map

package/dist/apps/cli/src/apps/cli/commands/project/utils/ensureNamespace.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensureNamespace.js","sourceRoot":"","sources":["../../../../../../../../../src/apps/cli/commands/project/utils/ensureNamespace.ts"],"names":[],"mappings":";;AACA,kDAA6D;AAE7D,yDAAsD;AACtD,kDAAkD;AAEnC,KAAK,oBAAW,OAAyB;;IACtD,MAAM,SAAS,GAAG,IAAA,iCAAsB,EAAC,OAAO,CAAC,UAAU,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;IAC1E,MAAM,aAAa,GAAG,IAAI,yBAAW,EAAE,CAAC;IACxC,MAAM,QAAQ,GAAiB;QAC7B,IAAI,EAAE,SAAS;QACf,MAAM,EAAE;YACN,YAAY,EAAE,OAAO,CAAC,UAAU,CAAC,YAAY;YAC7C,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,OAAO;YACnC,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,6BAA6B;YAE/F,GAAG,CAAC,MAAA,MAAA,OAAO,CAAC,UAAU,CAAC,IAAI,0CAAE,MAAM,mCAAI,EAAE,CAAC;SAC3C;KACF,CAAC;IAEF,aAAa,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAClC,MAAM,MAAM,GAAG,IAAA,kBAAS,GAAE,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAEtC,MAAM,MAAM,CAAC,cAAc,CACzB,SAAS,EACT,aAAa,EACb,SAAS,EACT,SAAS,EACT,SAAS,EACT,SAAS,EACT,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,8BAA8B,EAAE,EAAE,CAChE,CAAC,CAAC,mBAAmB;IACxB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,CAAA,MAAA,MAAA,CAAC,CAAC,QAAQ,0CAAE,IAAI,0CAAE,MAAM,MAAK,UAAU,EAAE,CAAC;YAC5C,MAAM,MAAM,CAAC,eAAe,CAAC,aAAa,CAAC,CAAC;QAC9C,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,KAAK,CAAC,MAAA,CAAC,CAAC,QAAQ,0CAAE,IAAI,CAAC,CAAC;YAChC,MAAM,CAAC,CAAC;QACV,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAtCD,4BAsCC"}

package/dist/apps/cli/src/apps/cli/utils/getGoogleAuthUserNumber.d.ts

@@ -0,0 +1,2 @@
+import type { IO } from "../../../core/types";
+export declare const getGoogleAuthUserNumber: (io: IO) => Promise<string>;

package/dist/apps/cli/src/apps/cli/utils/getGoogleAuthUserNumber.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getGoogleAuthUserNumber = void 0;
+const preferences_1 = require("../../../utils/preferences");
+const KEY = "googleAuthUserNumber";
+const getGoogleAuthUserNumber = async (io) => {
+    if (!(await (0, preferences_1.hasPreference)(KEY))) {
+        io.log("Please type in your google auth user number (0 if you have only one google account or maybe 1 if you have multiple)");
+        const authUserNumber = await io.promptDirect({
+            type: "number",
+            name: "authUserNumber",
+            default: 0,
+            message: "Auth user ",
+        });
+        await (0, preferences_1.setPreference)(KEY, authUserNumber);
+    }
+    return (0, preferences_1.getPreference)(KEY);
+};
+exports.getGoogleAuthUserNumber = getGoogleAuthUserNumber;
+//# sourceMappingURL=getGoogleAuthUserNumber.js.map

package/dist/apps/cli/src/apps/cli/utils/getGoogleAuthUserNumber.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getGoogleAuthUserNumber.js","sourceRoot":"","sources":["../../../../../../../src/apps/cli/utils/getGoogleAuthUserNumber.ts"],"names":[],"mappings":";;;AACA,4DAIoC;AAEpC,MAAM,GAAG,GAAG,sBAAsB,CAAC;AAC5B,MAAM,uBAAuB,GAAG,KAAK,EAAE,EAAM,EAAE,EAAE;IACtD,IAAI,CAAC,CAAC,MAAM,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAChC,EAAE,CAAC,GAAG,CACJ,qHAAqH,CACtH,CAAC;QAEF,MAAM,cAAc,GAAG,MAAM,EAAE,CAAC,YAAY,CAAC;YAC3C,IAAI,EAAE,QAAQ;YACd,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,YAAY;SACtB,CAAC,CAAC;QACH,MAAM,IAAA,2BAAa,EAAC,GAAG,EAAE,cAAc,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAA,2BAAa,EAAC,GAAG,CAAC,CAAC;AAC5B,CAAC,CAAC;AAfW,QAAA,uBAAuB,2BAelC"}

package/dist/apps/cli/src/catci.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/apps/cli/src/catci.js

@@ -0,0 +1,163 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+/**
+ * catci — catladder's CI companion.
+ *
+ * A minimal, treeshaken bundle of the CLI commands that CI jobs need.
+ * It is materialized into `.catladder-generated/catci/` by pipeline
+ * generation, so jobs can run it with plain `node` — always the exact
+ * version that generated the pipeline, with no install step and no
+ * catladder baked into job images.
+ *
+ * Deliberately no CLI framework: the surface is tiny and the callers
+ * are generated scripts, not humans.
+ */
+const rest_1 = require("@gitbeaker/rest");
+const evaluateSecurityAudit_1 = require("./security/evaluateSecurityAudit");
+const createSecurityAuditMergeRequest_1 = require("./security/createSecurityAuditMergeRequest");
+const changesetsReleaseJob_1 = require("./release/changesetsReleaseJob");
+const changesetCheckJob_1 = require("./release/changesetCheckJob");
+const githubQueuedRelease_1 = require("./release/githubQueuedRelease");
+const npmPublishJob_1 = require("./publish/npmPublishJob");
+const gitlabHost_1 = require("./utils/gitlabHost");
+const USAGE = `catci — catladder CI companion
+
+usage:
+  catci security-audit ci-job <path> <gitlab-token> <main-branch> <project-id> <user-id>
+      evaluates ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}; creates a gitlab MR with the
+      audit template when the document is missing (and exits 1)
+
+  catci security-audit check <path>
+      evaluates ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}; exits 1 with instructions when
+      the document is missing or unanswered (no remediation — works on
+      any CI, including github)
+
+  catci release changesets
+      consumes pending .changeset/*.md files: computes the next version
+      from the last v* tag, writes the changelog, commits, tags and
+      pushes (no-op when no changesets are pending)
+
+  catci release changeset-check
+      MR/PR pipelines: reports which changesets the merge request adds,
+      what is pending and what version merging would release (job log,
+      changeset-report.md, sticky MR/PR comment where a token allows);
+      exits 1 when the merge request adds no changeset
+
+  catci release dispatch-tagged-workflow <tag>
+      github only: dispatches the generated taggedRelease workflow for
+      the tag (tags pushed with the job token don't trigger it)
+
+  catci release github-queue-check
+      github only, first step of the manual create-release task:
+      releases right away when the main workflow run for HEAD is green
+      (queued=false step output), queues the release when it is still
+      running (queued=true, marker ref for the release-on-green
+      workflow), fails when it concluded red
+
+  catci release github-queued-guard <head-sha> <conclusion>
+      github only, guard of the release-on-green workflow: consumes the
+      queue marker when it matches the completed main run and decides
+      whether the release step runs (release=true step output)
+
+  catci publish npm --dir <dir> --env-type <envType> [--access <access>] [--registry <url>] [--dist-tag <tag>]
+      npmPackage deploy job: derives version + dist-tag from the
+      pipeline trigger (tagged release -> tag version @latest; branch/MR
+      -> 0.0.0-<slug>-<sha> canary, with next/beta branches publishing
+      under their own dist-tag), stamps package.json and runs npm
+      publish (authenticated via the NPM_TOKEN secret)
+`;
+const fail = (message) => {
+    console.error(message);
+    process.exit(1);
+};
+/**
+ * shared gate: evaluates the audit document and prints the overview.
+ * Returns null when the document could not be evaluated (missing or
+ * unparseable) so the caller can decide on remediation.
+ */
+const evaluateGate = async (path) => {
+    const evaluation = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path });
+    if (evaluation.isErr()) {
+        return null;
+    }
+    if (evaluation.value.score.answeredTopics === 0) {
+        fail(`audit document has no answered topics\n` +
+            `please answer security topics in ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} by adding responsible people and check/cross in the table`);
+    }
+    console.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(evaluation.value));
+    return evaluation.value;
+};
+const securityAuditCheck = async (path) => {
+    const evaluation = await evaluateGate(path);
+    if (!evaluation) {
+        fail(`could not evaluate ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}\n` +
+            `please add a ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME} security audit document to the repository ` +
+            `(run \`catladder security audit create\` locally to generate the template)`);
+    }
+};
+const securityAuditCiJob = async (path, token, mainBranch, projectId, userId) => {
+    const evaluation = await evaluateGate(path);
+    if (evaluation) {
+        return;
+    }
+    console.log("could not evaluate security audit document");
+    console.log("creating new merge request with security audit template...");
+    const api = new rest_1.Gitlab({ host: await (0, gitlabHost_1.getGitlabHostUrl)(), token });
+    const mr = await (0, createSecurityAuditMergeRequest_1.createSecurityAuditMergeRequest)({
+        api,
+        mainBranch,
+        projectId,
+        userId: parseInt(userId),
+    });
+    if (mr.isErr()) {
+        fail(`could not create merge request with security audit template: ${mr.error}`);
+        return;
+    }
+    console.log("security audit merge request created successfully");
+    console.log(`please finish the MR by updating ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}: ${mr.value.web_url}`);
+    process.exit(1);
+};
+const main = async () => {
+    const [group, command, ...args] = process.argv.slice(2);
+    if (group === "security-audit" && command === "ci-job" && args.length === 5) {
+        const [path, token, mainBranch, projectId, userId] = args;
+        return securityAuditCiJob(path, token, mainBranch, projectId, userId);
+    }
+    if (group === "security-audit" && command === "check" && args.length === 1) {
+        return securityAuditCheck(args[0]);
+    }
+    if (group === "release" && command === "changesets" && args.length === 0) {
+        return (0, changesetsReleaseJob_1.changesetsReleaseJob)();
+    }
+    if (group === "release" &&
+        command === "changeset-check" &&
+        args.length === 0) {
+        return (0, changesetCheckJob_1.changesetCheckJob)();
+    }
+    if (group === "release" &&
+        command === "dispatch-tagged-workflow" &&
+        args.length === 1) {
+        return (0, changesetsReleaseJob_1.dispatchTaggedReleaseWorkflow)(args[0]);
+    }
+    if (group === "release" &&
+        command === "github-queue-check" &&
+        args.length === 0) {
+        return (0, githubQueuedRelease_1.githubQueueCheckJob)();
+    }
+    if (group === "release" &&
+        command === "github-queued-guard" &&
+        args.length === 2) {
+        return (0, githubQueuedRelease_1.githubQueuedGuardJob)(args[0], args[1]);
+    }
+    if (group === "publish" && command === "npm") {
+        const options = (0, npmPublishJob_1.parseNpmPublishArgs)(args);
+        if (options) {
+            return (0, npmPublishJob_1.npmPublishJob)(options);
+        }
+    }
+    fail(USAGE);
+};
+main().catch((error) => {
+    fail(`catci failed: ${error instanceof Error ? error.message : error}`);
+});
+//# sourceMappingURL=catci.js.map

package/dist/apps/cli/src/catci.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catci.js","sourceRoot":"","sources":["../../../../src/catci.ts"],"names":[],"mappings":";;AAAA;;;;;;;;;;;GAWG;AACH,0CAAyC;AACzC,4EAG0C;AAC1C,gGAGoD;AACpD,yEAGwC;AACxC,mEAAgE;AAChE,uEAGuC;AACvC,2DAA6E;AAC7E,mDAAsD;AAEtD,MAAM,KAAK,GAAG;;;;kBAII,0DAAwB;;;;kBAIxB,0DAAwB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAqCzC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAC1C,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CACF,yCAAyC;YACvC,oCAAoC,0DAAwB,4DAA4D,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,KAAK,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAChD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CACF,sBAAsB,0DAAwB,IAAI;YAChD,gBAAgB,0DAAwB,6CAA6C;YACrF,4EAA4E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAY,EACZ,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,EAAE;IACF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,MAAM,IAAA,6BAAgB,GAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,GAAG,MAAM,IAAA,iEAA+B,EAAC;QAC/C,GAAG;QACH,UAAU;QACV,SAAS;QACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;KACzB,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,CACF,gEAAgE,EAAE,CAAC,KAAK,EAAE,CAC3E,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CACT,oCAAoC,0DAAwB,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CACpF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;IACtB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC1D,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,IAAA,2CAAoB,GAAE,CAAC;IAChC,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,iBAAiB;QAC7B,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,qCAAiB,GAAE,CAAC;IAC7B,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,0BAA0B;QACtC,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,oDAA6B,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,oBAAoB;QAChC,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,yCAAmB,GAAE,CAAC;IAC/B,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,qBAAqB;QACjC,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,0CAAoB,EAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,KAAK,EAAE,CAAC;QAC7C,MAAM,OAAO,GAAG,IAAA,mCAAmB,EAAC,IAAI,CAAC,CAAC;QAC1C,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,IAAA,6BAAa,EAAC,OAAO,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC;AACd,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,CAAC,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC"}

package/dist/apps/cli/src/catenv.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/apps/cli/src/catenv.js

@@ -0,0 +1,62 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+const commander_1 = require("commander");
+const catenv_1 = __importDefault(require("./apps/catenv/catenv"));
+const parseChoice_1 = require("./config/parseChoice");
+const packageInfos_1 = __importDefault(require("./packageInfos"));
+const program = new commander_1.Command();
+program
+    .name("catenv")
+    .description("Environment variable and pipeline generation via direnv")
+    .version(packageInfos_1.default.version)
+    .argument("[envComponent]", "env or env:component")
+    .option("-v, --verbose", "verbose output")
+    .option("-p, --print-variables", "print variables")
+    .addOption(new commander_1.Option("--vault-mode <mode>", [
+    "how to interact with the secrets vault:",
+    "auto: contact the vault when cached secrets are missing (may prompt to unlock)",
+    "no-prompt: like auto, but fail instead of prompting",
+    "offline: never contact the vault, use only locally cached secrets",
+    "refresh: ignore the local cache once and refresh it from the vault",
+].join("\n"))
+    .choices(["auto", "no-prompt", "offline", "refresh"])
+    .default("auto"))
+    .option("--non-interactive", "never prompt (token setup, vault unlock) — assumed automatically when not attached to a terminal (direnv, turbo, CI)")
+    .action((envComponent, opts) => {
+    var _a, _b;
+    // interactive iff a human is attached: direnv captures stdout,
+    // turbo/CI pipe it — all of those auto-degrade to non-interactive
+    const interactive = !opts.nonInteractive &&
+        process.stdin.isTTY === true &&
+        process.stdout.isTTY === true;
+    (0, catenv_1.default)(envComponent ? (0, parseChoice_1.parseChoice)(envComponent) : null, {
+        verbose: (_a = opts.verbose) !== null && _a !== void 0 ? _a : false,
+        printVariables: (_b = opts.printVariables) !== null && _b !== void 0 ? _b : false,
+        vaultMode: opts.vaultMode,
+        interactive,
+    }).then(() => {
+        // we have to exit manually, because we have some file watches
+        process.exit();
+    });
+});
+// Prevent Node.js from printing the (minified) source line on uncaught errors
+process.on("uncaughtException", (err) => {
+    var _a;
+    console.error((_a = err.stack) !== null && _a !== void 0 ? _a : `${err.name}: ${err.message}`);
+    process.exit(1);
+});
+process.on("unhandledRejection", (reason) => {
+    var _a;
+    if (reason instanceof Error) {
+        console.error((_a = reason.stack) !== null && _a !== void 0 ? _a : `${reason.name}: ${reason.message}`);
+    }
+    else {
+        console.error(reason);
+    }
+    process.exit(1);
+});
+program.parse();
+//# sourceMappingURL=catenv.js.map

package/dist/apps/cli/src/catenv.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"catenv.js","sourceRoot":"","sources":["../../../../src/catenv.ts"],"names":[],"mappings":";;;;;AAAA,yCAA4C;AAC5C,kEAA0C;AAC1C,sDAAmD;AACnD,kEAA0C;AAG1C,MAAM,OAAO,GAAG,IAAI,mBAAO,EAAE,CAAC;AAE9B,OAAO;KACJ,IAAI,CAAC,QAAQ,CAAC;KACd,WAAW,CAAC,yDAAyD,CAAC;KACtE,OAAO,CAAC,sBAAY,CAAC,OAAO,CAAC;KAC7B,QAAQ,CAAC,gBAAgB,EAAE,sBAAsB,CAAC;KAClD,MAAM,CAAC,eAAe,EAAE,gBAAgB,CAAC;KACzC,MAAM,CAAC,uBAAuB,EAAE,iBAAiB,CAAC;KAClD,SAAS,CACR,IAAI,kBAAM,CACR,qBAAqB,EACrB;IACE,yCAAyC;IACzC,gFAAgF;IAChF,qDAAqD;IACrD,mEAAmE;IACnE,oEAAoE;CACrE,CAAC,IAAI,CAAC,IAAI,CAAC,CACb;KACE,OAAO,CAAC,CAAC,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;KACpD,OAAO,CAAC,MAAM,CAAC,CACnB;KACA,MAAM,CACL,mBAAmB,EACnB,sHAAsH,CACvH;KACA,MAAM,CACL,CACE,YAAgC,EAChC,IAKC,EACD,EAAE;;IACF,+DAA+D;IAC/D,kEAAkE;IAClE,MAAM,WAAW,GACf,CAAC,IAAI,CAAC,cAAc;QACpB,OAAO,CAAC,KAAK,CAAC,KAAK,KAAK,IAAI;QAC5B,OAAO,CAAC,MAAM,CAAC,KAAK,KAAK,IAAI,CAAC;IAChC,IAAA,gBAAM,EAAC,YAAY,CAAC,CAAC,CAAC,IAAA,yBAAW,EAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE;QACtD,OAAO,EAAE,MAAA,IAAI,CAAC,OAAO,mCAAI,KAAK;QAC9B,cAAc,EAAE,MAAA,IAAI,CAAC,cAAc,mCAAI,KAAK;QAC5C,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,WAAW;KACZ,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QACX,8DAA8D;QAC9D,OAAO,CAAC,IAAI,EAAE,CAAC;IACjB,CAAC,CAAC,CAAC;AACL,CAAC,CACF,CAAC;AAEJ,8EAA8E;AAC9E,OAAO,CAAC,EAAE,CAAC,mBAAmB,EAAE,CAAC,GAAG,EAAE,EAAE;;IACtC,OAAO,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,KAAK,mCAAI,GAAG,GAAG,CAAC,IAAI,KAAK,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,oBAAoB,EAAE,CAAC,MAAM,EAAE,EAAE;;IAC1C,IAAI,MAAM,YAAY,KAAK,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CAAC,MAAA,MAAM,CAAC,KAAK,mCAAI,GAAG,MAAM,CAAC,IAAI,KAAK,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;IACrE,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,KAAK,EAAE,CAAC"}

package/dist/apps/cli/src/cli.d.ts

@@ -0,0 +1 @@
+export {};