@catladder/cli 0.0.0-main-8dbb6c76 → 0.0.0-main-a6b45abe

package/dist/packages/pipeline/src/utils/measureTime.d.ts

@@ -0,0 +1,6 @@
+/// <reference types="node" />
+export declare const measureTime: (logLevel: string, label: string, meta: Record<string, any>) => {
+    done: () => void;
+    [Symbol.dispose]: () => void;
+    addMeta: (meta: Record<string, any>) => void;
+};

package/dist/packages/pipeline/src/utils/measureTime.js

@@ -0,0 +1,42 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.measureTime = void 0;
+const crypto_1 = __importDefault(require("crypto"));
+const measureTime = (logLevel, label, meta) => {
+    const shortId = crypto_1.default.randomUUID().slice(0, 8);
+    const start = performance.now();
+    let logMeta = { ...meta };
+    const addMeta = (meta) => {
+        logMeta = {
+            ...logMeta,
+            ...meta,
+        };
+    };
+    console.log(logLevel, `[${shortId}] [START] ${label} `, {
+        shortId,
+        ...logMeta,
+    });
+    let disposed = false;
+    const done = () => {
+        if (disposed)
+            return;
+        disposed = true;
+        const durationMs = Math.round(performance.now() - start);
+        const durationS = `${durationMs / 1000}s`;
+        console.log(logLevel, `[${shortId}] [END] ${label} | ${durationS}`, {
+            shortId,
+            durationS,
+            ...logMeta,
+        });
+    };
+    return {
+        done,
+        [Symbol.dispose]: done,
+        addMeta,
+    };
+};
+exports.measureTime = measureTime;
+//# sourceMappingURL=measureTime.js.map

package/dist/packages/pipeline/src/utils/measureTime.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"measureTime.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/utils/measureTime.ts"],"names":[],"mappings":";;;;;;AAAA,oDAA4B;AACrB,MAAM,WAAW,GAAG,CACzB,QAAgB,EAChB,KAAa,EACb,IAAyB,EACzB,EAAE;IACF,MAAM,OAAO,GAAG,gBAAM,CAAC,UAAU,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IAEhC,IAAI,OAAO,GAAG,EAAE,GAAG,IAAI,EAAE,CAAC;IAC1B,MAAM,OAAO,GAAG,CAAC,IAAyB,EAAE,EAAE;QAC5C,OAAO,GAAG;YACR,GAAG,OAAO;YACV,GAAG,IAAI;SACR,CAAC;IACJ,CAAC,CAAC;IAEF,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,OAAO,aAAa,KAAK,GAAG,EAAE;QACtD,OAAO;QACP,GAAG,OAAO;KACX,CAAC,CAAC;IAEH,IAAI,QAAQ,GAAG,KAAK,CAAC;IAErB,MAAM,IAAI,GAAG,GAAG,EAAE;QAChB,IAAI,QAAQ;YAAE,OAAO;QACrB,QAAQ,GAAG,IAAI,CAAC;QAEhB,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;QACzD,MAAM,SAAS,GAAG,GAAG,UAAU,GAAG,IAAI,GAAG,CAAC;QAC1C,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,OAAO,WAAW,KAAK,MAAM,SAAS,EAAE,EAAE;YAClE,OAAO;YACP,SAAS;YACT,GAAG,OAAO;SACX,CAAC,CAAC;IACL,CAAC,CAAC;IAEF,OAAO;QACL,IAAI;QACJ,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,IAAI;QACtB,OAAO;KACR,CAAC;AACJ,CAAC,CAAC;AAzCW,QAAA,WAAW,eAyCtB"}

package/dist/packages/pipeline/src/utils/removeUndefined.d.ts

@@ -0,0 +1 @@
+export declare const removeUndefined: <T extends object>(obj: T) => T;

package/dist/packages/pipeline/src/utils/removeUndefined.js

@@ -0,0 +1,6 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.removeUndefined = void 0;
+const removeUndefined = (obj) => Object.fromEntries(Object.entries(obj).filter(([, value]) => value !== undefined));
+exports.removeUndefined = removeUndefined;
+//# sourceMappingURL=removeUndefined.js.map

package/dist/packages/pipeline/src/utils/removeUndefined.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"removeUndefined.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/utils/removeUndefined.ts"],"names":[],"mappings":";;;AAAO,MAAM,eAAe,GAAG,CAAmB,GAAM,EAAK,EAAE,CAC7D,MAAM,CAAC,WAAW,CAChB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC,CAC1D,CAAC;AAHI,QAAA,eAAe,mBAGnB"}

package/dist/packages/pipeline/src/utils/writeFiles.d.ts

@@ -0,0 +1,31 @@
+import { stringify } from "yaml";
+import type { Config } from "../types";
+import type { BaseHookContext } from "../types/hooks";
+type WriteFileOptions = {
+    commentChar: string;
+};
+/**
+ * the line that marks a file as catladder-generated. Cleanup code uses
+ * it to tell a generated file apart from a hand-maintained one at the
+ * same path (e.g. a `.gitlab-ci.yml` a project wrote itself).
+ */
+export declare const GENERATED_FILE_MARKER = "\uD83D\uDC31 \uD83D\uDD28 This file is generated by catladder";
+type StringifyOptions = Exclude<Parameters<typeof stringify>[2], null | undefined | string | number>;
+export declare const yamlStringifyOptions: StringifyOptions;
+export declare class FileWriter {
+    private readonly config;
+    static create(config: Config): FileWriter;
+    constructor(config: Config);
+    protected writeTheFile(path: string, content: string): Promise<void>;
+    protected getBaseHookContext(path: string): Promise<BaseHookContext>;
+    /**
+     * writes content verbatim (no auto-generated header) — e.g. for
+     * materialized dockerfiles, where a leading comment would break
+     * parser directives like `# syntax = ...`
+     */
+    writeGeneratedFileRaw(path: string, content: string): Promise<void>;
+    writeGeneratedFile(path: string, content: string, options: WriteFileOptions): Promise<void>;
+    writeYamlfile(path: string, data: any): Promise<void>;
+    protected getAutoGeneratedHeader(commentChar: string): string;
+}
+export {};

package/dist/packages/pipeline/src/utils/writeFiles.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.FileWriter = exports.yamlStringifyOptions = exports.GENERATED_FILE_MARKER = void 0;
+const promises_1 = require("fs/promises");
+const yaml_1 = require("yaml");
+/**
+ * the line that marks a file as catladder-generated. Cleanup code uses
+ * it to tell a generated file apart from a hand-maintained one at the
+ * same path (e.g. a `.gitlab-ci.yml` a project wrote itself).
+ */
+exports.GENERATED_FILE_MARKER = "🐱 🔨 This file is generated by catladder";
+exports.yamlStringifyOptions = {
+    // prevents colapsing long command statements into multiple lines
+    lineWidth: 0,
+    // represent multi line commands as single line json strings
+    doubleQuotedAsJSON: true,
+    // Better readability when bash commands most often use double quotes
+    singleQuote: true,
+};
+class FileWriter {
+    static create(config) {
+        return new FileWriter(config);
+    }
+    constructor(config) {
+        this.config = config;
+        this.config = config;
+    }
+    async writeTheFile(path, content) {
+        var _a, _b;
+        const transformedContent = await ((_b = (_a = this.config.hooks) === null || _a === void 0 ? void 0 : _a.transformFileBeforeWrite) === null || _b === void 0 ? void 0 : _b.call(_a, {
+            ...(await this.getBaseHookContext(path)),
+            content,
+        }));
+        await (0, promises_1.writeFile)(path, transformedContent !== null && transformedContent !== void 0 ? transformedContent : content, {
+            encoding: "utf-8",
+        });
+    }
+    async getBaseHookContext(path) {
+        var _a, _b;
+        const filename = (_a = path.split("/").pop()) !== null && _a !== void 0 ? _a : "";
+        return {
+            filename,
+            path,
+            extension: (_b = path.split(".").pop()) !== null && _b !== void 0 ? _b : "",
+        };
+    }
+    /**
+     * writes content verbatim (no auto-generated header) — e.g. for
+     * materialized dockerfiles, where a leading comment would break
+     * parser directives like `# syntax = ...`
+     */
+    async writeGeneratedFileRaw(path, content) {
+        await this.writeTheFile(path, content);
+    }
+    async writeGeneratedFile(path, content, options) {
+        await this.writeTheFile(path, [this.getAutoGeneratedHeader(options.commentChar), content].join("\n"));
+    }
+    async writeYamlfile(path, data) {
+        var _a, _b;
+        const dataTransformed = await ((_b = (_a = this.config.hooks) === null || _a === void 0 ? void 0 : _a.transformYamlBeforeWrite) === null || _b === void 0 ? void 0 : _b.call(_a, {
+            ...(await this.getBaseHookContext(path)),
+            data,
+        }));
+        return this.writeGeneratedFile(path, (0, yaml_1.stringify)(dataTransformed !== null && dataTransformed !== void 0 ? dataTransformed : data, exports.yamlStringifyOptions), {
+            commentChar: "#",
+        });
+    }
+    getAutoGeneratedHeader(commentChar) {
+        return [
+            "-------------------------------------------------",
+            exports.GENERATED_FILE_MARKER,
+            `🚨 Do not edit this file manually 🚨`,
+            "-------------------------------------------------",
+        ]
+            .map((line) => `${commentChar} ${line}`)
+            .join("\n")
+            .concat("\n");
+    }
+}
+exports.FileWriter = FileWriter;
+//# sourceMappingURL=writeFiles.js.map

package/dist/packages/pipeline/src/utils/writeFiles.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"writeFiles.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/utils/writeFiles.ts"],"names":[],"mappings":";;;AAAA,0CAAwC;AACxC,+BAAiC;AAQjC;;;;GAIG;AACU,QAAA,qBAAqB,GAChC,2CAA2C,CAAC;AAMjC,QAAA,oBAAoB,GAAqB;IACpD,iEAAiE;IACjE,SAAS,EAAE,CAAC;IACZ,4DAA4D;IAC5D,kBAAkB,EAAE,IAAI;IACxB,qEAAqE;IACrE,WAAW,EAAE,IAAI;CAClB,CAAC;AAEF,MAAa,UAAU;IACd,MAAM,CAAC,MAAM,CAAC,MAAc;QACjC,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,YAA6B,MAAc;QAAd,WAAM,GAAN,MAAM,CAAQ;QACzC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAES,KAAK,CAAC,YAAY,CAAC,IAAY,EAAE,OAAe;;QACxD,MAAM,kBAAkB,GACtB,MAAM,CAAA,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,KAAK,0CAAE,wBAAwB,mDAAG;YAClD,GAAG,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACxC,OAAO;SACR,CAAC,CAAA,CAAC;QACL,MAAM,IAAA,oBAAS,EAAC,IAAI,EAAE,kBAAkB,aAAlB,kBAAkB,cAAlB,kBAAkB,GAAI,OAAO,EAAE;YACnD,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;IACL,CAAC;IAES,KAAK,CAAC,kBAAkB,CAAC,IAAY;;QAC7C,MAAM,QAAQ,GAAG,MAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,mCAAI,EAAE,CAAC;QAC7C,OAAO;YACL,QAAQ;YACR,IAAI;YACJ,SAAS,EAAE,MAAA,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,mCAAI,EAAE;SACvC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACI,KAAK,CAAC,qBAAqB,CAAC,IAAY,EAAE,OAAe;QAC9D,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAC7B,IAAY,EACZ,OAAe,EACf,OAAyB;QAEzB,MAAM,IAAI,CAAC,YAAY,CACrB,IAAI,EACJ,CAAC,IAAI,CAAC,sBAAsB,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACvE,CAAC;IACJ,CAAC;IAEM,KAAK,CAAC,aAAa,CAAC,IAAY,EAAE,IAAS;;QAChD,MAAM,eAAe,GAAG,MAAM,CAAA,MAAA,MAAA,IAAI,CAAC,MAAM,CAAC,KAAK,0CAAE,wBAAwB,mDACvE;YACE,GAAG,CAAC,MAAM,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,CAAC;YACxC,IAAI;SACL,CACF,CAAA,CAAC;QACF,OAAO,IAAI,CAAC,kBAAkB,CAC5B,IAAI,EACJ,IAAA,gBAAS,EAAC,eAAe,aAAf,eAAe,cAAf,eAAe,GAAI,IAAI,EAAE,4BAAoB,CAAC,EACxD;YACE,WAAW,EAAE,GAAG;SACjB,CACF,CAAC;IACJ,CAAC;IAES,sBAAsB,CAAC,WAAmB;QAClD,OAAO;YACL,mDAAmD;YACnD,6BAAqB;YACrB,sCAAsC;YACtC,mDAAmD;SACpD;aACE,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,WAAW,IAAI,IAAI,EAAE,CAAC;aACvC,IAAI,CAAC,IAAI,CAAC;aACV,MAAM,CAAC,IAAI,CAAC,CAAC;IAClB,CAAC;CACF;AA5ED,gCA4EC"}

package/dist/packages/pipeline/src/verify/createVerifyJobs.d.ts

@@ -0,0 +1,4 @@
+import type { ComponentContext } from "../types/context";
+import type { CatladderJob } from "../types/jobs";
+export declare const VERIFY_JOB_NAME = "\uD83D\uDD0D verify";
+export declare const createVerifyJobs: (context: ComponentContext) => Promise<CatladderJob[]>;

package/dist/packages/pipeline/src/verify/createVerifyJobs.js

@@ -0,0 +1,75 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createVerifyJobs = exports.VERIFY_JOB_NAME = void 0;
+const createArtifactsConfig_1 = require("../build/base/createArtifactsConfig");
+const cache_1 = require("../build/node/cache");
+const constants_1 = require("../build/node/constants");
+const packageManagerInstall_1 = require("../build/node/packageManagerInstall");
+const deploy_1 = require("../deploy");
+const runner_1 = require("../runner");
+const utils_1 = require("../utils");
+exports.VERIFY_JOB_NAME = "🔍 verify";
+const createVerifyJobs = async (context) => {
+    var _a, _b, _c, _d, _e, _f, _g;
+    const verifyConfig = context.componentConfig.verify;
+    if (!verifyConfig) {
+        return [];
+    }
+    const deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
+    if (!deployConfig) {
+        // nothing is deployed, so there is nothing to verify
+        return [];
+    }
+    const isNodeBuild = context.build.type !== "disabled" && context.build.buildType === "node";
+    const [packageManagerInstall, nodeCache] = isNodeBuild
+        ? await Promise.all([
+            (0, packageManagerInstall_1.getPackageManagerInstall)(context),
+            (0, cache_1.getNodeCache)(context, "pull"),
+        ])
+        : [null, null];
+    const setupScript = (_d = (_c = (_b = deploy_1.DEPLOY_TYPES[deployConfig.type]).verifyJobSetupScript) === null || _c === void 0 ? void 0 : _c.call(_b, context)) !== null && _d !== void 0 ? _d : [];
+    return [
+        {
+            name: exports.VERIFY_JOB_NAME,
+            stage: "verify",
+            envMode: "stagePerEnv",
+            requires: [
+                // wait for this component's own deploy
+                { capability: "deployment", artifacts: false },
+                // ...and for the deploys of the components listed in waitFor
+                ...((_e = verifyConfig.waitFor) !== null && _e !== void 0 ? _e : []).map((componentName) => ({
+                    capability: "deployment",
+                    from: { component: componentName },
+                    artifacts: false,
+                    strict: true,
+                })),
+            ],
+            // browser tests need a jobImage carrying the browser, e.g. the
+            // official playwright image (version-matched to the project)
+            image: (_f = verifyConfig.jobImage) !== null && _f !== void 0 ? _f : (0, runner_1.getRunnerImage)("jobs-default"),
+            // neutral cache declarations — each backend lowers them itself
+            // (gitlab strips the github-only hint keys, github builds cache
+            // restore steps). Pre-lowering via createJobCacheFromCacheConfigs
+            // would leak the hints into the gitlab yaml, which rejects them.
+            caches: nodeCache !== null && nodeCache !== void 0 ? nodeCache : undefined,
+            variables: {
+                ...context.environment.envVars,
+            },
+            runnerVariables: {
+                ...constants_1.NODE_RUNNER_BUILD_VARIABLES,
+                ...((_g = verifyConfig.runnerVariables) !== null && _g !== void 0 ? _g : {}),
+            },
+            script: [
+                ...setupScript,
+                ...(packageManagerInstall ? (0, packageManagerInstall_1.ensureNodeVersion)(context) : []),
+                `cd ${context.build.dir}`,
+                ...(packageManagerInstall !== null && packageManagerInstall !== void 0 ? packageManagerInstall : []),
+                ...(0, utils_1.ensureArray)(verifyConfig.command),
+            ],
+            allow_failure: verifyConfig.allowFailure,
+            ...(0, createArtifactsConfig_1.createArtifactsConfig)(context.build.dir, verifyConfig.artifactsReports, verifyConfig.artifacts),
+        },
+    ];
+};
+exports.createVerifyJobs = createVerifyJobs;
+//# sourceMappingURL=createVerifyJobs.js.map

package/dist/packages/pipeline/src/verify/createVerifyJobs.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createVerifyJobs.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/verify/createVerifyJobs.ts"],"names":[],"mappings":";;;AAAA,+EAA4E;AAC5E,+CAAmD;AACnD,uDAAsE;AACtE,+EAG6C;AAC7C,sCAAyC;AACzC,sCAA2C;AAG3C,oCAAuC;AAE1B,QAAA,eAAe,GAAG,WAAW,CAAC;AAEpC,MAAM,gBAAgB,GAAG,KAAK,EACnC,OAAyB,EACA,EAAE;;IAC3B,MAAM,YAAY,GAAG,OAAO,CAAC,eAAe,CAAC,MAAM,CAAC;IACpD,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC;IAC5C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,qDAAqD;QACrD,OAAO,EAAE,CAAC;IACZ,CAAC;IAED,MAAM,WAAW,GACf,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,MAAM,CAAC;IAE1E,MAAM,CAAC,qBAAqB,EAAE,SAAS,CAAC,GAAG,WAAW;QACpD,CAAC,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC;YAChB,IAAA,gDAAwB,EAAC,OAAO,CAAC;YACjC,IAAA,oBAAY,EAAC,OAAO,EAAE,MAAM,CAAC;SAC9B,CAAC;QACJ,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAEjB,MAAM,WAAW,GACf,MAAA,MAAA,MAAA,qBAAY,CAAC,YAAY,CAAC,IAAI,CAAC,EAAC,oBAAoB,mDAAG,OAAO,CAAC,mCAAI,EAAE,CAAC;IAExE,OAAO;QACL;YACE,IAAI,EAAE,uBAAe;YACrB,KAAK,EAAE,QAAQ;YACf,OAAO,EAAE,aAAa;YACtB,QAAQ,EAAE;gBACR,uCAAuC;gBACvC,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,KAAK,EAAE;gBAC9C,6DAA6D;gBAC7D,GAAG,CAAC,MAAA,YAAY,CAAC,OAAO,mCAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;oBACtD,UAAU,EAAE,YAAqB;oBACjC,IAAI,EAAE,EAAE,SAAS,EAAE,aAAa,EAAE;oBAClC,SAAS,EAAE,KAAK;oBAChB,MAAM,EAAE,IAAI;iBACb,CAAC,CAAC;aACJ;YACD,+DAA+D;YAC/D,6DAA6D;YAC7D,KAAK,EAAE,MAAA,YAAY,CAAC,QAAQ,mCAAI,IAAA,uBAAc,EAAC,cAAc,CAAC;YAC9D,+DAA+D;YAC/D,gEAAgE;YAChE,kEAAkE;YAClE,iEAAiE;YACjE,MAAM,EAAE,SAAS,aAAT,SAAS,cAAT,SAAS,GAAI,SAAS;YAC9B,SAAS,EAAE;gBACT,GAAG,OAAO,CAAC,WAAW,CAAC,OAAO;aAC/B;YACD,eAAe,EAAE;gBACf,GAAG,uCAA2B;gBAC9B,GAAG,CAAC,MAAA,YAAY,CAAC,eAAe,mCAAI,EAAE,CAAC;aACxC;YACD,MAAM,EAAE;gBACN,GAAG,WAAW;gBACd,GAAG,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAA,yCAAiB,EAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5D,MAAM,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACzB,GAAG,CAAC,qBAAqB,aAArB,qBAAqB,cAArB,qBAAqB,GAAI,EAAE,CAAC;gBAChC,GAAG,IAAA,mBAAW,EAAC,YAAY,CAAC,OAAO,CAAC;aACrC;YACD,aAAa,EAAE,YAAY,CAAC,YAAY;YACxC,GAAG,IAAA,6CAAqB,EACtB,OAAO,CAAC,KAAK,CAAC,GAAG,EACjB,YAAY,CAAC,gBAAgB,EAC7B,YAAY,CAAC,SAAS,CACvB;SACF;KACF,CAAC;AACJ,CAAC,CAAC;AAzEW,QAAA,gBAAgB,oBAyE3B"}

package/dist/packages/pipeline/src/verify/index.d.ts

@@ -0,0 +1,2 @@
+export * from "./types";
+export * from "./createVerifyJobs";

package/dist/packages/pipeline/src/verify/index.js

@@ -0,0 +1,19 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./types"), exports);
+__exportStar(require("./createVerifyJobs"), exports);
+//# sourceMappingURL=index.js.map

package/dist/packages/pipeline/src/verify/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/verify/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0CAAwB;AACxB,qDAAmC"}

package/dist/packages/pipeline/src/verify/types.d.ts

@@ -0,0 +1,16 @@
+import type { TestJobCustom } from "../build/types";
+/**
+ * post-deploy verification job configuration
+ */
+export type VerifyConfig = TestJobCustom & {
+    /**
+     * command(s) to run against the deployed environment (e.g. `yarn e2e`).
+     * Runs in the component's directory.
+     */
+    command: string | string[];
+    /**
+     * names of other components whose deploy must finish before this verify job runs
+     * (in addition to this component's own deploy, which is always awaited)
+     */
+    waitFor?: string[];
+};

package/dist/packages/pipeline/src/verify/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/dist/packages/pipeline/src/verify/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../../../packages/pipeline/src/verify/types.ts"],"names":[],"mappings":""}

package/dist/runner-images/agent-claude/Dockerfile

@@ -0,0 +1,5 @@
+FROM node:24-alpine3.21
+
+RUN apk update && apk add --no-cache git curl bash
+
+RUN npm install -g @anthropic-ai/claude-code@2.1.139 @zereight/mcp-gitlab@2.1.10

package/dist/runner-images/changesets/Dockerfile

@@ -0,0 +1,13 @@
+FROM node:lts-alpine
+
+RUN apk add --no-cache bash git git-lfs
+
+# no release tooling baked in: the changesets release logic lives in
+# catci, which is materialized into the repository checkout
+# (.catladder-generated/catci) by pipeline generation
+
+RUN mkdir -p /scripts
+COPY ./scripts/* /scripts/
+RUN chmod +x /scripts/*
+
+ENV PATH="/scripts:${PATH}"

package/dist/runner-images/changesets/scripts/changesetCheck

@@ -0,0 +1,23 @@
+#!/bin/bash
+set -e
+
+# MR/PR pipelines only: reports which changesets this merge request
+# adds, what is pending and what version merging would release; exits 1
+# (the job runs with allow_failure) when no changeset is added
+
+if [ "$GITHUB_ACTIONS" = "true" ]; then
+  # github container jobs: the workspace volume is owned by the host
+  # runner user while this step runs as the container user, and the
+  # safe.directory entry actions/checkout writes goes to a temporary
+  # HOME that is gone by now — git would refuse the repo ("dubious
+  # ownership")
+  git config --global --add safe.directory "$(pwd)"
+fi
+
+CATCI=".catladder-generated/catci/index.js"
+if [ ! -f "$CATCI" ]; then
+  echo "$CATCI not found — regenerate the pipeline with a current catladder version (catenv)"
+  exit 1
+fi
+
+node "$CATCI" release changeset-check

package/dist/runner-images/changesets/scripts/changesetsRelease

@@ -0,0 +1,37 @@
+#!/bin/bash
+set -e
+
+# 0. check and evaluate security audit or create MR with security audit template (and exit 1)
+# 1. compute the next version from the last v* tag + pending .changeset/*.md files
+# 2. write the changelog, commit, tag and push (all done by catci)
+
+# NOTE: keep the security-audit gate below in sync with
+# runner-images/semantic-release/scripts/semanticRelease
+
+if [ "$GITHUB_ACTIONS" = "true" ]; then
+  # github container jobs: the workspace volume is owned by the host
+  # runner user while this step runs as the container user, and the
+  # safe.directory entry actions/checkout writes goes to a temporary
+  # HOME that is gone by now — git would refuse the repo ("dubious
+  # ownership")
+  git config --global --add safe.directory "$(pwd)"
+fi
+
+echo "doing security audit check"
+CATCI=".catladder-generated/catci/index.js"
+if [ -f "$CATCI" ]; then
+  # catci is materialized by pipeline generation — always the exact
+  # catladder version that generated this pipeline
+  if [ "$GITHUB_ACTIONS" = "true" ]; then
+    # github: gate only — the MR remediation is gitlab-specific
+    node "$CATCI" security-audit check ./
+  else
+    node "$CATCI" security-audit ci-job ./ "$GL_TOKEN" "$CI_DEFAULT_BRANCH" "$CI_PROJECT_ID" "$GITLAB_USER_ID"
+  fi
+else
+  echo "$CATCI not found — regenerate the pipeline with a current catladder version (catenv)"
+  exit 1
+fi
+
+echo "doing changesets release"
+node "$CATCI" release changesets

package/dist/runner-images/docker-build/Dockerfile

@@ -0,0 +1,26 @@
+
+FROM docker:29.5.1
+
+# add bash
+RUN apk add --no-cache bash 
+
+# for glcoud
+ARG GCLOUD_SDK_VERSION=525.0.0
+
+RUN apk --update add curl python3 py3-crcmod libc6-compat
+RUN curl -O https://dl.google.com/dl/cloudsdk/channels/rapid/downloads/google-cloud-sdk-${GCLOUD_SDK_VERSION}-linux-x86_64.tar.gz && \
+    tar zxvf google-cloud-sdk-${GCLOUD_SDK_VERSION}-linux-x86_64.tar.gz && \
+    rm google-cloud-sdk-${GCLOUD_SDK_VERSION}-linux-x86_64.tar.gz && \
+    ./google-cloud-sdk/install.sh
+ENV PATH="/google-cloud-sdk/bin:${PATH}"
+
+# end gcloud
+
+# for scripts
+
+RUN mkdir p /scripts
+COPY ./scripts/* /scripts/
+RUN chmod +x /scripts/*
+
+ENV PATH="/scripts:${PATH}"
+

package/dist/runner-images/docker-build/scripts/ensureMeteorDockerfile

@@ -0,0 +1,55 @@
+#!/bin/bash
+
+if [ ! -f $APP_DIR/.dockerignore ]; then
+
+    cat >$APP_DIR/.dockerignore <<EOF
+$APP_DIR/node_modules
+**/__snapshots__/**
+.git
+
+EOF
+fi
+
+if [ ! -f $APP_DIR/Dockerfile ]; then
+    echo "Creating Dockerfile"
+    if [[ ! -z "$METEOR_OVERRIDE_NODE_VERSION" ]]; then
+        NODE_VERSION=$METEOR_OVERRIDE_NODE_VERSION
+    else
+        NODE_VERSION_FULL=$(cat $APP_DIR/dist/bundle/.node_version.txt)
+        NODE_VERSION=${NODE_VERSION_FULL/v/} # remove v
+    fi
+    if [ "$NODE_VERSION" = "14.21.4" ]; then
+        DOCKER_IMAGE="meteor/node:$NODE_VERSION" # meteor maintenance for because of fibers
+    else
+        DOCKER_IMAGE="node:$NODE_VERSION"
+    fi
+    cat >$APP_DIR/Dockerfile <<EOF
+FROM $DOCKER_IMAGE
+
+# install yarn. new meteor image has no yarn installed
+# only install if it does not exist
+RUN command -v yarn || npm install --global yarn
+
+
+$DOCKERFILE_ADDITIONS
+
+# we copy also source code and scripts for commands
+# This is technically not required for meteor, but useful if we have additional scripts 
+WORKDIR /src
+$METEOR_INSTALL_SCRIPTS
+
+
+# copy the bundle
+COPY $APP_DIR/dist /src/dist
+
+# now install meteor deps
+RUN cd /src/dist/bundle/programs/server && npm install
+
+$DOCKERFILE_ADDITIONS_END
+
+WORKDIR /src/dist/bundle
+
+CMD ["node", "main.js"]
+EOF
+
+fi

package/dist/runner-images/docker-build/scripts/ensureNginxDockerfile

@@ -0,0 +1,85 @@
+#!/bin/bash
+
+# ensure nginx config
+echo "ensureNginxDockerfile in $APP_DIR"
+
+if [ ! -f $APP_DIR/nginx.conf ]; then
+    echo "Creating nginx.conf"
+
+    cat >$APP_DIR/nginx.conf <<NGINX
+    
+server {
+    listen       8080;
+    server_name  localhost;
+    error_page 404 =200 /index.html;
+
+    charset utf-8;
+
+    add_header Strict-Transport-Security "max-age=63072000; includeSubdomains; preload";
+    add_header Referrer-Policy "strict-origin-when-cross-origin";
+    add_header X-Content-Type-Options "nosniff";
+    add_header X-Frame-Options "SAMEORIGIN";
+
+    location / {
+        root   /usr/share/nginx/html;
+        index  index.html index.htm;
+    }
+
+    location /__health {
+        access_log off;
+        types { } default_type "text/html; charset=utf-8";
+        return 200 "ok\n";
+    }
+
+    # https://trac.nginx.org/nginx/ticket/2216
+    include mime.types;
+    types
+    {
+        application/javascript mjs;
+    }
+}
+
+NGINX
+
+fi
+# ensure docker ignore
+if [ ! -f $APP_DIR/.dockerignore ]; then
+
+    cat >.dockerignore <<EOF
+**/node_modules
+**/__snapshots__/**
+.git
+
+EOF
+
+fi
+
+if [ ! -f $APP_DIR/Dockerfile ]; then
+    echo "Creating Dockerfile"
+
+    cat >$APP_DIR/Dockerfile <<EOF
+
+$DOCKERFILE_ADDITIONS
+
+FROM nginx:stable
+WORKDIR /app
+
+RUN sed --in-place "s/^\s*user .*//" /etc/nginx/nginx.conf && \
+    chown -R nginx:nginx /app && \
+    chmod -R 755 /app && \
+    chown -R nginx:nginx /var/cache/nginx && \
+    chown -R nginx:nginx /var/log/nginx && \
+    chown -R nginx:nginx /etc/nginx/conf.d && \
+    touch /var/run/nginx.pid && \
+    chown -R nginx:nginx /var/run/nginx.pid
+
+COPY $APP_DIR/nginx.conf /etc/nginx/conf.d/default.conf
+COPY $APP_DIR/dist/ /usr/share/nginx/html/
+
+$DOCKERFILE_ADDITIONS_END
+
+USER nginx
+EXPOSE 8080
+
+EOF
+fi

package/dist/runner-images/docker-build/scripts/ensureNodeDockerfile

@@ -0,0 +1,57 @@
+#!/bin/bash
+
+# the default dockerfile includes node alpine
+
+# the dockerignore ignores node_modules as these have to be rebuilt anyway
+# as well as __snapshots__ are used for unitests (if any)
+
+if [ ! -f $APP_DIR/.dockerignore ]; then
+
+    cat >$APP_DIR/.dockerignore <<EOF
+**/node_modules
+**/__snapshots__/**
+.git
+
+EOF
+
+fi
+
+if [ -f $APP_DIR/.nvmrc ]; then
+    NODE_VERSION="$(cat $APP_DIR/.nvmrc | sed '/^$/d' | sed 's/[a-z-]//g')"
+elif [ -f .nvmrc ]; then
+    NODE_VERSION="$(cat .nvmrc | sed '/^$/d' | sed 's/[a-z-]//g')"
+else
+    NODE_VERSION=14
+fi
+
+if [ ! -f $APP_DIR/Dockerfile ]; then
+    echo "Creating Dockerfile"
+
+    cat >$APP_DIR/Dockerfile <<EOF
+FROM node:$NODE_VERSION-alpine
+
+
+
+$DOCKERFILE_ADDITIONS
+
+RUN apk add --no-cache git curl
+# package-manager setup (e.g. installing pnpm globally) and the
+# workspace-file copy run as root: pnpm ADDs a tar whose extracted
+# parent dirs come out root-owned (ADD --chown only covers the files),
+# so it needs a root chown before the node user can write node_modules.
+# The actual install below still runs as the unprivileged node user.
+$DOCKER_SETUP_PACKAGE_MANAGER
+
+$DOCKER_COPY_WORKSPACE_FILES
+
+USER node
+
+WORKDIR /app/$APP_DIR
+
+$DOCKER_COPY_AND_INSTALL_APP
+
+
+$DOCKERFILE_ADDITIONS_END
+
+EOF
+fi