@catladder/cli 0.0.0-main-8dbb6c76 → 0.0.0-main-a6b45abe

package/dist/apps/cli/src/commands/project/commandPortForward.js

@@ -0,0 +1,78 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandPortForward = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const kubernetes_1 = require("../../kubernetes");
+const log_1 = require("../../utils/log");
+const portForward_1 = require("../../kubernetes/portForward");
+const projects_1 = require("../../utils/projects");
+const ensureCluster_1 = require("../../apps/cli/commands/project/utils/ensureCluster");
+const parseChoice_1 = require("../../config/parseChoice");
+const getProjectConfig_1 = require("../../config/getProjectConfig");
+const pipeline_1 = require("../../../../../packages/pipeline/src/index.js");
+const portForwards_1 = require("../../utils/portForwards");
+const open_1 = __importDefault(require("open"));
+const autocompletions_1 = require("../../apps/cli/commands/project/utils/autocompletions");
+const availability_1 = require("../availability");
+exports.commandPortForward = (0, defineCommand_1.defineCommand)({
+    name: "project port-forward",
+    description: "start port-forwarding",
+    group: "project",
+    isAvailable: (0, availability_1.hasDeployType)("kubernetes", "google-cloudrun"),
+    inputs: {
+        envComponent: {
+            type: "string",
+            message: "environment:component",
+            positional: true,
+            choices: async () => (0, autocompletions_1.envAndComponents)(),
+        },
+        podName: {
+            type: "string",
+            message: "Which pod? 🤔",
+            choices: async (ctx) => (0, kubernetes_1.getProjectPodNames)(await ctx.get("envComponent")),
+        },
+        localPort: { type: "number", message: "Local port: " },
+        remotePort: { type: "number", message: "Remote port: " },
+        mr: { type: "number", message: "Which mr 🤔 " },
+    },
+    execute: async (ctx) => {
+        var _a, _b, _c;
+        const envComponent = await ctx.get("envComponent");
+        const { env, componentName } = (0, parseChoice_1.parseChoice)(envComponent);
+        const context = await (0, getProjectConfig_1.getPipelineContextByChoice)(env, componentName);
+        if ((0, pipeline_1.isOfDeployType)((_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config, "kubernetes")) {
+            await (0, ensureCluster_1.ensureCluster)(ctx, envComponent);
+            const namespace = await (0, projects_1.getProjectNamespace)(envComponent);
+            const podNames = await (0, kubernetes_1.getProjectPodNames)(envComponent);
+            if (podNames.length === 0) {
+                (0, log_1.logError)(ctx, "sorry, no pods found");
+                return;
+            }
+            const podName = await ctx.get("podName");
+            const localPort = await ctx.get("localPort");
+            const remotePort = await ctx.get("remotePort");
+            return (0, portForward_1.startKubePortForward)(podName, localPort, remotePort, namespace);
+        }
+        if ((0, pipeline_1.isOfDeployType)((_b = context.deploy) === null || _b === void 0 ? void 0 : _b.config, "google-cloudrun")) {
+            if (!(0, pipeline_1.isOfDeployType)((_c = context.deploy) === null || _c === void 0 ? void 0 : _c.config, "google-cloudrun")) {
+                throw new Error("not cloud run");
+            }
+            const { fullName } = context.environment;
+            let serviceName = fullName.toString();
+            if (context.environment.envType === "review") {
+                const mr = await ctx.get("mr");
+                serviceName = serviceName
+                    .toString()
+                    .replace("-review-", "-review-mr" + mr + "-");
+            }
+            const { projectId, region } = context.deploy.config;
+            const command = `gcloud beta run services proxy ${serviceName} --project ${projectId} --region ${region}`;
+            await (0, portForwards_1.startPortForwardCommand)(`cloudRun/${serviceName}`, command);
+            (0, open_1.default)("http://localhost:8080");
+        }
+    },
+});
+//# sourceMappingURL=commandPortForward.js.map

package/dist/apps/cli/src/commands/project/commandPortForward.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandPortForward.js","sourceRoot":"","sources":["../../../../../../src/commands/project/commandPortForward.ts"],"names":[],"mappings":";;;;;;AAAA,4DAAyD;AACzD,iDAAsD;AACtD,yCAA2C;AAC3C,8DAAoE;AACpE,mDAA2D;AAC3D,uFAAoF;AACpF,0DAAuD;AACvD,oEAA2E;AAC3E,kDAAqD;AACrD,2DAAmE;AACnE,gDAAwB;AACxB,2FAAyF;AACzF,kDAAgD;AAEnC,QAAA,kBAAkB,GAAG,IAAA,6BAAa,EAAC;IAC9C,IAAI,EAAE,sBAAsB;IAC5B,WAAW,EAAE,uBAAuB;IACpC,KAAK,EAAE,SAAS;IAChB,WAAW,EAAE,IAAA,4BAAa,EAAC,YAAY,EAAE,iBAAiB,CAAC;IAC3D,MAAM,EAAE;QACN,YAAY,EAAE;YACZ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,uBAAuB;YAChC,UAAU,EAAE,IAAI;YAChB,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,IAAA,kCAAgB,GAAE;SACxC;QACD,OAAO,EAAE;YACP,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,eAAe;YACxB,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,CAAC,IAAA,+BAAkB,EAAC,MAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;SAC1E;QACD,SAAS,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;QACtD,UAAU,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,eAAe,EAAE;QACxD,EAAE,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE;KAChD;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;;QACrB,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QACnD,MAAM,EAAE,GAAG,EAAE,aAAa,EAAE,GAAG,IAAA,yBAAW,EAAC,YAAY,CAAC,CAAC;QACzD,MAAM,OAAO,GAAG,MAAM,IAAA,6CAA0B,EAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QAErE,IAAI,IAAA,yBAAc,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAE,YAAY,CAAC,EAAE,CAAC;YACzD,MAAM,IAAA,6BAAa,EAAC,GAAG,EAAE,YAAY,CAAC,CAAC;YACvC,MAAM,SAAS,GAAG,MAAM,IAAA,8BAAmB,EAAC,YAAY,CAAC,CAAC;YAC1D,MAAM,QAAQ,GAAG,MAAM,IAAA,+BAAkB,EAAC,YAAY,CAAC,CAAC;YACxD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAA,cAAQ,EAAC,GAAG,EAAE,sBAAsB,CAAC,CAAC;gBACtC,OAAO;YACT,CAAC;YACD,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACzC,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;YAC7C,MAAM,UAAU,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;YAC/C,OAAO,IAAA,kCAAoB,EAAC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;QACzE,CAAC;QAED,IAAI,IAAA,yBAAc,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;YAC9D,IAAI,CAAC,IAAA,yBAAc,EAAC,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,EAAE,iBAAiB,CAAC,EAAE,CAAC;gBAC/D,MAAM,IAAI,KAAK,CAAC,eAAe,CAAC,CAAC;YACnC,CAAC;YAED,MAAM,EAAE,QAAQ,EAAE,GAAG,OAAO,CAAC,WAAW,CAAC;YACzC,IAAI,WAAW,GAAW,QAAQ,CAAC,QAAQ,EAAE,CAAC;YAC9C,IAAI,OAAO,CAAC,WAAW,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAC7C,MAAM,EAAE,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC/B,WAAW,GAAG,WAAW;qBACtB,QAAQ,EAAE;qBACV,OAAO,CAAC,UAAU,EAAE,YAAY,GAAG,EAAE,GAAG,GAAG,CAAC,CAAC;YAClD,CAAC;YAED,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC;YACpD,MAAM,OAAO,GAAG,kCAAkC,WAAW,cAAc,SAAS,aAAa,MAAM,EAAE,CAAC;YAE1G,MAAM,IAAA,sCAAuB,EAAC,YAAY,WAAW,EAAE,EAAE,OAAO,CAAC,CAAC;YAClE,IAAA,cAAI,EAAC,uBAAuB,CAAC,CAAC;QAChC,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/apps/cli/src/commands/project/commandProjectRestoreDb.d.ts

@@ -0,0 +1,19 @@
+export declare const commandProjectRestoreDb: import("../../core").CommandDef<{
+    readonly source: {
+        readonly type: "string";
+        readonly message: "Source instance? 🤔 ";
+        readonly choices: () => Promise<string[]>;
+    };
+    readonly target: {
+        readonly type: "string";
+        readonly message: "target env? 🤔 ";
+        readonly choices: () => Promise<{
+            name: string;
+            value: string;
+        }[]>;
+    };
+    readonly confirmInstance: {
+        readonly type: "string";
+        readonly message: "confirm: ";
+    };
+}>;

package/dist/apps/cli/src/commands/project/commandProjectRestoreDb.js

@@ -0,0 +1,170 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandProjectRestoreDb = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const getProjectConfig_1 = require("../../config/getProjectConfig");
+const availability_1 = require("../availability");
+const startProxy_1 = require("../../gcloud/cloudSql/startProxy");
+const parseConnectionString_1 = require("../../gcloud/cloudSql/parseConnectionString");
+const copyDb_1 = require("../../gcloud/cloudSql/copyDb");
+const pipeline_1 = require("../../../../../packages/pipeline/src/index.js");
+const componentHasCloudSql = (context) => {
+    var _a, _b, _c;
+    const deployConfig = (_a = context.deploy) === null || _a === void 0 ? void 0 : _a.config;
+    if ((0, pipeline_1.isOfDeployType)(deployConfig, "google-cloudrun")) {
+        return !!deployConfig.cloudSql;
+    }
+    if ((0, pipeline_1.isOfDeployType)(deployConfig, "kubernetes")) {
+        return !!((_c = (_b = deployConfig.values) === null || _b === void 0 ? void 0 : _b.cloudsql) === null || _c === void 0 ? void 0 : _c.enabled);
+    }
+    return false;
+};
+exports.commandProjectRestoreDb = (0, defineCommand_1.defineCommand)({
+    name: "project cloudsql restore-db",
+    description: "restores a project db from one source to another target",
+    group: "project",
+    isAvailable: (0, availability_1.hasCloudSql)(),
+    inputs: {
+        source: {
+            type: "string",
+            message: "Source instance? 🤔 ",
+            choices: async () => {
+                const allContexts = await (0, getProjectConfig_1.getAllPipelineContexts)(undefined, {
+                    includeLocal: true,
+                });
+                const sortByEnv = (a, b) => {
+                    const aLocal = a.startsWith("local:");
+                    const bLocal = b.startsWith("local:");
+                    if (aLocal !== bLocal)
+                        return aLocal ? 1 : -1;
+                    return a.localeCompare(b);
+                };
+                return allContexts
+                    .filter(componentHasCloudSql)
+                    .map((c) => `${c.env}:${c.name}`)
+                    .sort(sortByEnv);
+            },
+        },
+        target: {
+            type: "string",
+            message: "target env? 🤔 ",
+            choices: async () => {
+                const allContexts = await (0, getProjectConfig_1.getAllPipelineContexts)(undefined, {
+                    includeLocal: true,
+                });
+                const sortByEnv = (a, b) => {
+                    const aLocal = a.startsWith("local:");
+                    const bLocal = b.startsWith("local:");
+                    if (aLocal !== bLocal)
+                        return aLocal ? 1 : -1;
+                    return a.localeCompare(b);
+                };
+                return allContexts
+                    .filter(componentHasCloudSql)
+                    .map((c) => {
+                    const value = `${c.env}:${c.name}`;
+                    const isProd = c.environment.envType === "prod";
+                    return {
+                        name: isProd ? `⚠️ ${value}` : value,
+                        value,
+                    };
+                })
+                    .sort((a, b) => sortByEnv(a.value, b.value));
+            },
+        },
+        confirmInstance: {
+            type: "string",
+            message: "confirm: ",
+        },
+    },
+    execute: async (ctx) => {
+        var _a, _b, _c, _d, _e;
+        const source = await ctx.get("source");
+        const [sourceEnv, sourceComponent] = source.split(":");
+        const sourceContext = await (0, getProjectConfig_1.getPipelineContextByChoice)(sourceEnv, sourceComponent);
+        const sourceEnvVars = await (0, getProjectConfig_1.getEnvVarsResolved)(ctx, sourceContext.env, sourceContext.name);
+        let sourceProxy;
+        let sourceDbName;
+        let sourceUsername;
+        let sourcePassword;
+        let targetUsername;
+        let targetPassword;
+        let targetProxy;
+        let sourcePort;
+        let targetPort;
+        let targetDbName;
+        const closeAll = () => {
+            sourceProxy === null || sourceProxy === void 0 ? void 0 : sourceProxy.stop();
+            targetProxy === null || targetProxy === void 0 ? void 0 : targetProxy.stop();
+        };
+        if (sourceEnv === "local") {
+            const parsersResult = (0, parseConnectionString_1.parseConnectionString)(sourceEnvVars.DATABASE_URL.toString());
+            sourcePort = (_b = (_a = parsersResult.hosts) === null || _a === void 0 ? void 0 : _a[0]) === null || _b === void 0 ? void 0 : _b.port;
+            sourceUsername = parsersResult.username;
+            sourcePassword = parsersResult.password;
+            sourceDbName = parsersResult.endpoint;
+        }
+        else {
+            sourcePort = 54399;
+            sourceProxy = await (0, startProxy_1.startCloudSqlProxyInBackground)({
+                instanceName: sourceEnvVars.CLOUD_SQL_INSTANCE_CONNECTION_NAME.toString(),
+                localPort: sourcePort,
+            });
+            sourceUsername = sourceEnvVars.DB_USER.toString();
+            sourcePassword = sourceEnvVars.DB_PASSWORD.toString();
+            sourceDbName = (_c = sourceEnvVars.DB_NAME) === null || _c === void 0 ? void 0 : _c.toString();
+        }
+        const target = await ctx.get("target");
+        const [targetEnv, targetComponent] = target.split(":");
+        const targetContext = await (0, getProjectConfig_1.getPipelineContextByChoice)(targetEnv, targetComponent);
+        const targetEnvVars = await (0, getProjectConfig_1.getEnvVarsResolved)(ctx, targetContext.env, targetContext.name);
+        if (targetEnv === "local") {
+            const parsersResult = (0, parseConnectionString_1.parseConnectionString)(targetEnvVars.DATABASE_URL.toString());
+            targetPort = (_e = (_d = parsersResult.hosts) === null || _d === void 0 ? void 0 : _d[0]) === null || _e === void 0 ? void 0 : _e.port;
+            targetUsername = parsersResult.username;
+            targetPassword = parsersResult.password;
+            targetDbName = parsersResult.endpoint;
+        }
+        else {
+            targetPort = 54499;
+            targetProxy = await (0, startProxy_1.startCloudSqlProxyInBackground)({
+                instanceName: targetEnvVars.CLOUD_SQL_INSTANCE_CONNECTION_NAME.toString(),
+                localPort: targetPort,
+            });
+            targetUsername = targetEnvVars.DB_USER.toString();
+            targetPassword = targetEnvVars.DB_PASSWORD.toString();
+            targetDbName = targetEnvVars.DB_NAME.toString();
+        }
+        const shouldContinue = await ctx.confirm(`This will drop ${targetEnv}/${targetDbName} and replace it with ${sourceEnv}/${sourceDbName}. Continue? 🤔 `);
+        if (!shouldContinue) {
+            ctx.log("abort");
+            closeAll();
+            return;
+        }
+        if (targetContext.environment.envType === "prod") {
+            ctx.log(`\n🚨 You are overriding a production environment. Please type in ${targetEnvVars.CLOUD_SQL_INSTANCE_CONNECTION_NAME} to continue\n\n`);
+            const confirmInstance = await ctx.get("confirmInstance");
+            if (confirmInstance !== targetEnvVars.CLOUD_SQL_INSTANCE_CONNECTION_NAME) {
+                ctx.log("abort");
+                closeAll();
+                return;
+            }
+        }
+        try {
+            await (0, copyDb_1.spawnCopyDb)({
+                targetPassword,
+                targetPort,
+                targetUsername,
+                sourceUsername,
+                sourcePassword,
+                sourcePort,
+                sourceDbName,
+                targetDbName,
+            });
+        }
+        finally {
+            closeAll();
+        }
+    },
+});
+//# sourceMappingURL=commandProjectRestoreDb.js.map

package/dist/apps/cli/src/commands/project/commandProjectRestoreDb.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandProjectRestoreDb.js","sourceRoot":"","sources":["../../../../../../src/commands/project/commandProjectRestoreDb.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,oEAIuC;AACvC,kDAA8C;AAE9C,iEAAkF;AAClF,uFAAoF;AACpF,yDAA2D;AAE3D,kDAAqD;AAErD,MAAM,oBAAoB,GAAG,CAAC,OAAyB,EAAE,EAAE;;IACzD,MAAM,YAAY,GAAG,MAAA,OAAO,CAAC,MAAM,0CAAE,MAAM,CAAC;IAC5C,IAAI,IAAA,yBAAc,EAAC,YAAY,EAAE,iBAAiB,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC;IACjC,CAAC;IACD,IAAI,IAAA,yBAAc,EAAC,YAAY,EAAE,YAAY,CAAC,EAAE,CAAC;QAC/C,OAAO,CAAC,CAAC,CAAA,MAAA,MAAA,YAAY,CAAC,MAAM,0CAAE,QAAQ,0CAAE,OAAO,CAAA,CAAC;IAClD,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC,CAAC;AAEW,QAAA,uBAAuB,GAAG,IAAA,6BAAa,EAAC;IACnD,IAAI,EAAE,6BAA6B;IACnC,WAAW,EAAE,yDAAyD;IACtE,KAAK,EAAE,SAAS;IAChB,WAAW,EAAE,IAAA,0BAAW,GAAE;IAC1B,MAAM,EAAE;QACN,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,sBAAsB;YAC/B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,IAAA,yCAAsB,EAAC,SAAS,EAAE;oBAC1D,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE;oBACzC,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtC,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,MAAM,KAAK,MAAM;wBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9C,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC5B,CAAC,CAAC;gBACF,OAAO,WAAW;qBACf,MAAM,CAAC,oBAAoB,CAAC;qBAC5B,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;qBACrC,IAAI,CAAC,SAAS,CAAC,CAAC;YACrB,CAAC;SACF;QACD,MAAM,EAAE;YACN,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,iBAAiB;YAC1B,OAAO,EAAE,KAAK,IAAI,EAAE;gBAClB,MAAM,WAAW,GAAG,MAAM,IAAA,yCAAsB,EAAC,SAAS,EAAE;oBAC1D,YAAY,EAAE,IAAI;iBACnB,CAAC,CAAC;gBACH,MAAM,SAAS,GAAG,CAAC,CAAS,EAAE,CAAS,EAAE,EAAE;oBACzC,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtC,MAAM,MAAM,GAAG,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;oBACtC,IAAI,MAAM,KAAK,MAAM;wBAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAC9C,OAAO,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;gBAC5B,CAAC,CAAC;gBACF,OAAO,WAAW;qBACf,MAAM,CAAC,oBAAoB,CAAC;qBAC5B,GAAG,CAAC,CAAC,CAAM,EAAE,EAAE;oBACd,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;oBACnC,MAAM,MAAM,GAAG,CAAC,CAAC,WAAW,CAAC,OAAO,KAAK,MAAM,CAAC;oBAChD,OAAO;wBACL,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK;wBACpC,KAAK;qBACN,CAAC;gBACJ,CAAC,CAAC;qBACD,IAAI,CAAC,CAAC,CAAM,EAAE,CAAM,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;YAC3D,CAAC;SACF;QACD,eAAe,EAAE;YACf,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,WAAW;SACrB;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;;QACrB,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEvC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,MAAM,IAAA,6CAA0B,EACpD,SAAS,EACT,eAAe,CAChB,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,IAAA,qCAAkB,EAC5C,GAAG,EACH,aAAa,CAAC,GAAG,EACjB,aAAa,CAAC,IAAI,CACnB,CAAC;QAEF,IAAI,WAAoC,CAAC;QACzC,IAAI,YAAoB,CAAC;QACzB,IAAI,cAAsB,CAAC;QAC3B,IAAI,cAAsB,CAAC;QAC3B,IAAI,cAAsB,CAAC;QAC3B,IAAI,cAAsB,CAAC;QAC3B,IAAI,WAAoC,CAAC;QACzC,IAAI,UAAkB,CAAC;QACvB,IAAI,UAAkB,CAAC;QACvB,IAAI,YAAoB,CAAC;QAEzB,MAAM,QAAQ,GAAG,GAAG,EAAE;YACpB,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,IAAI,EAAE,CAAC;YACpB,WAAW,aAAX,WAAW,uBAAX,WAAW,CAAE,IAAI,EAAE,CAAC;QACtB,CAAC,CAAC;QAEF,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAA,6CAAqB,EACzC,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,CACtC,CAAC;YACF,UAAU,GAAG,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAG,CAAC,CAAC,0CAAE,IAAI,CAAC;YAC5C,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;YACxC,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;YACxC,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,KAAK,CAAC;YACnB,WAAW,GAAG,MAAM,IAAA,2CAA8B,EAAC;gBACjD,YAAY,EACV,aAAa,CAAC,kCAAkC,CAAC,QAAQ,EAAE;gBAC7D,SAAS,EAAE,UAAU;aACtB,CAAC,CAAC;YACH,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClD,cAAc,GAAG,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YACtD,YAAY,GAAG,MAAA,aAAa,CAAC,OAAO,0CAAE,QAAQ,EAAE,CAAC;QACnD,CAAC;QAED,MAAM,MAAM,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAEvC,MAAM,CAAC,SAAS,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACvD,MAAM,aAAa,GAAG,MAAM,IAAA,6CAA0B,EACpD,SAAS,EACT,eAAe,CAChB,CAAC;QACF,MAAM,aAAa,GAAG,MAAM,IAAA,qCAAkB,EAC5C,GAAG,EACH,aAAa,CAAC,GAAG,EACjB,aAAa,CAAC,IAAI,CACnB,CAAC;QAEF,IAAI,SAAS,KAAK,OAAO,EAAE,CAAC;YAC1B,MAAM,aAAa,GAAG,IAAA,6CAAqB,EACzC,aAAa,CAAC,YAAY,CAAC,QAAQ,EAAE,CACtC,CAAC;YACF,UAAU,GAAG,MAAA,MAAA,aAAa,CAAC,KAAK,0CAAG,CAAC,CAAC,0CAAE,IAAI,CAAC;YAC5C,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;YACxC,cAAc,GAAG,aAAa,CAAC,QAAQ,CAAC;YACxC,YAAY,GAAG,aAAa,CAAC,QAAQ,CAAC;QACxC,CAAC;aAAM,CAAC;YACN,UAAU,GAAG,KAAK,CAAC;YACnB,WAAW,GAAG,MAAM,IAAA,2CAA8B,EAAC;gBACjD,YAAY,EACV,aAAa,CAAC,kCAAkC,CAAC,QAAQ,EAAE;gBAC7D,SAAS,EAAE,UAAU;aACtB,CAAC,CAAC;YACH,cAAc,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YAClD,cAAc,GAAG,aAAa,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC;YACtD,YAAY,GAAG,aAAa,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;QAClD,CAAC;QAED,MAAM,cAAc,GAAG,MAAM,GAAG,CAAC,OAAO,CACtC,kBAAkB,SAAS,IAAI,YAAY,wBAAwB,SAAS,IAAI,YAAY,iBAAiB,CAC9G,CAAC;QACF,IAAI,CAAC,cAAc,EAAE,CAAC;YACpB,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACjB,QAAQ,EAAE,CAAC;YACX,OAAO;QACT,CAAC;QAED,IAAI,aAAa,CAAC,WAAW,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;YACjD,GAAG,CAAC,GAAG,CACL,oEAAoE,aAAa,CAAC,kCAAkC,kBAAkB,CACvI,CAAC;YACF,MAAM,eAAe,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;YACzD,IACE,eAAe,KAAK,aAAa,CAAC,kCAAkC,EACpE,CAAC;gBACD,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;gBACjB,QAAQ,EAAE,CAAC;gBACX,OAAO;YACT,CAAC;QACH,CAAC;QAED,IAAI,CAAC;YACH,MAAM,IAAA,oBAAW,EAAC;gBAChB,cAAc;gBACd,UAAU;gBACV,cAAc;gBACd,cAAc;gBACd,cAAc;gBACd,UAAU;gBACV,YAAY;gBACZ,YAAY;aACb,CAAC,CAAC;QACL,CAAC;gBAAS,CAAC;YACT,QAAQ,EAAE,CAAC;QACb,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}

package/dist/apps/cli/src/commands/project/commandRenewToken.d.ts

@@ -0,0 +1 @@
+export declare const commandRenewToken: import("../../core").CommandDef<{}>;

package/dist/apps/cli/src/commands/project/commandRenewToken.js

@@ -0,0 +1,15 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandRenewToken = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const setupAccessTokens_1 = require("../../apps/cli/commands/project/setup/setupAccessTokens");
+exports.commandRenewToken = (0, defineCommand_1.defineCommand)({
+    name: "project renew-token",
+    description: "Configures the project access token for semantic release.",
+    group: "project",
+    inputs: {},
+    execute: async (ctx) => {
+        await (0, setupAccessTokens_1.setupAccessTokens)(ctx);
+    },
+});
+//# sourceMappingURL=commandRenewToken.js.map

package/dist/apps/cli/src/commands/project/commandRenewToken.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandRenewToken.js","sourceRoot":"","sources":["../../../../../../src/commands/project/commandRenewToken.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,+FAA4F;AAE/E,QAAA,iBAAiB,GAAG,IAAA,6BAAa,EAAC;IAC7C,IAAI,EAAE,qBAAqB;IAC3B,WAAW,EAAE,2DAA2D;IACxE,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,IAAA,qCAAiB,EAAC,GAAG,CAAC,CAAC;IAC/B,CAAC;CACF,CAAC,CAAC"}

package/dist/apps/cli/src/commands/project/commandSecretsClearBackups.d.ts

@@ -0,0 +1,7 @@
+export declare const commandSecretsClearBackups: import("../../core").CommandDef<{
+    readonly keep: {
+        readonly type: "number";
+        readonly message: "How many backups should we keep? 🤔";
+        readonly default: 1;
+    };
+}>;

package/dist/apps/cli/src/commands/project/commandSecretsClearBackups.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandSecretsClearBackups = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const gitlab_1 = require("../../utils/gitlab");
+exports.commandSecretsClearBackups = (0, defineCommand_1.defineCommand)({
+    name: "project secrets-clear-backups",
+    description: "clears all backups",
+    group: "project",
+    inputs: {
+        keep: {
+            type: "number",
+            message: "How many backups should we keep? 🤔",
+            default: 1,
+        },
+    },
+    execute: async (ctx) => {
+        const keep = await ctx.get("keep");
+        await (0, gitlab_1.clearBackups)(ctx, keep);
+    },
+});
+//# sourceMappingURL=commandSecretsClearBackups.js.map

package/dist/apps/cli/src/commands/project/commandSecretsClearBackups.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecretsClearBackups.js","sourceRoot":"","sources":["../../../../../../src/commands/project/commandSecretsClearBackups.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,+CAAkD;AAErC,QAAA,0BAA0B,GAAG,IAAA,6BAAa,EAAC;IACtD,IAAI,EAAE,+BAA+B;IACrC,WAAW,EAAE,oBAAoB;IACjC,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,qCAAqC;YAC9C,OAAO,EAAE,CAAC;SACX;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QACnC,MAAM,IAAA,qBAAY,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAChC,CAAC;CACF,CAAC,CAAC"}

package/dist/apps/cli/src/commands/project/commandSecretsSyncGithub.d.ts

@@ -0,0 +1,60 @@
+import type { Config } from "../../../../../packages/pipeline/src/index.js";
+import type { IO } from "../../core/types";
+/**
+ * all secrets declared in the config, with their values read from the
+ * vault (github secrets are write-only and can never act as a source)
+ */
+export declare const collectSecretsFromVault: (io: IO, envFilter?: string[]) => Promise<{
+    secrets: {
+        name: string;
+        value: string;
+        kind: "secret" | "variable";
+    }[];
+    missing: string[];
+}>;
+/**
+ * derives which github environment(s) each secret/variable must live in
+ * by scanning the GENERATED workflows: a `${{ secrets.X }}` / `${{
+ * vars.X }}` reference in a job's env targets that job's environment
+ * (or the repo level when the job has none). Deriving from the real
+ * output means the sync can never drift from what the workflows expect.
+ *
+ * Environment secrets are the answer to github's cap of 100 secrets
+ * per REPO (a multi-env project easily exceeds it): the cap applies
+ * per environment instead.
+ */
+export declare const collectSecretTargets: (config: Config) => Promise<Map<string, Set<string>>>;
+/**
+ * pushes vault values to github via the gh cli: sensitive ones as
+ * secrets (masked), "variable"-kind ones as variables (plain) — each
+ * into the environment(s) whose jobs reference them
+ */
+export declare const pushSecretsToGithub: (io: IO, repo: string, secrets: {
+    name: string;
+    value: string;
+    kind: "secret" | "variable";
+}[], targets: Map<string, Set<string>>) => Promise<void>;
+/**
+ * resolves the github repository from the configured git remote
+ * (`pipelines.github.gitRemote`, defaults to origin)
+ */
+export declare const getConfiguredGithubRepo: () => Promise<string | undefined>;
+/**
+ * copies the catladder secrets from the vault to github actions
+ * repository secrets, keeping the exact same names, so the github
+ * pipeline can reference them as ${{ secrets.<NAME> }}.
+ */
+export declare const commandSecretsSyncGithub: import("../../core/types").CommandDef<{
+    readonly repo: {
+        readonly type: "string";
+        readonly message: "github repository (owner/name)";
+        readonly positional: true;
+        readonly required: false;
+    };
+    readonly env: {
+        readonly type: "string";
+        readonly message: "only sync these environments (comma-separated, e.g. review,dev) — github allows at most 100 repo secrets";
+        readonly positional: true;
+        readonly required: false;
+    };
+}>;

package/dist/apps/cli/src/commands/project/commandSecretsSyncGithub.js

@@ -0,0 +1,191 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandSecretsSyncGithub = exports.getConfiguredGithubRepo = exports.pushSecretsToGithub = exports.collectSecretTargets = exports.collectSecretsFromVault = void 0;
+const pipeline_1 = require("../../../../../packages/pipeline/src/index.js");
+const getProjectConfig_1 = require("../../config/getProjectConfig");
+const defineCommand_1 = require("../../core/defineCommand");
+const github_1 = require("../../utils/github");
+/**
+ * all secrets declared in the config, with their values read from the
+ * vault (github secrets are write-only and can never act as a source)
+ */
+const collectSecretsFromVault = async (io, envFilter) => {
+    const envAndComponents = await (0, getProjectConfig_1.getAllComponentsWithAllEnvsHierarchical)();
+    const kinds = new Map();
+    for (const [componentName, envs] of Object.entries(envAndComponents)) {
+        for (const env of envs) {
+            if (envFilter && !envFilter.includes(env)) {
+                continue;
+            }
+            const { secretEnvVarKeys, jobOnlyVars } = await (0, getProjectConfig_1.getEnvironment)(env, componentName);
+            const keys = [
+                ...secretEnvVarKeys,
+                ...jobOnlyVars.build.secretEnvVarKeys,
+                ...jobOnlyVars.deploy.secretEnvVarKeys,
+            ];
+            keys.forEach(({ key, kind }) => kinds.set((0, pipeline_1.getSecretVarName)(env, componentName, key), kind !== null && kind !== void 0 ? kind : "secret"));
+        }
+    }
+    const names = [...kinds.keys()];
+    const values = await (await io.getVaultManager()).readSecrets(names, io);
+    const secrets = names
+        .filter((name) => values[name] !== undefined)
+        .map((name) => {
+        var _a;
+        return ({
+            name,
+            value: values[name],
+            kind: (_a = kinds.get(name)) !== null && _a !== void 0 ? _a : "secret",
+        });
+    });
+    const missing = names.filter((name) => values[name] === undefined);
+    return { secrets, missing };
+};
+exports.collectSecretsFromVault = collectSecretsFromVault;
+/** marker for repo-level (environment-less) targets */
+const REPO_LEVEL = "";
+/**
+ * derives which github environment(s) each secret/variable must live in
+ * by scanning the GENERATED workflows: a `${{ secrets.X }}` / `${{
+ * vars.X }}` reference in a job's env targets that job's environment
+ * (or the repo level when the job has none). Deriving from the real
+ * output means the sync can never drift from what the workflows expect.
+ *
+ * Environment secrets are the answer to github's cap of 100 secrets
+ * per REPO (a multi-env project easily exceeds it): the cap applies
+ * per environment instead.
+ */
+const collectSecretTargets = async (config) => {
+    var _a;
+    const workflows = await new pipeline_1.GithubBackend().createWorkflows(config);
+    const targets = new Map();
+    for (const workflow of Object.values(workflows)) {
+        for (const job of Object.values(workflow.jobs)) {
+            const environment = typeof job.environment === "object"
+                ? job.environment.name
+                : job.environment;
+            for (const value of Object.values((_a = job.env) !== null && _a !== void 0 ? _a : {})) {
+                if (typeof value !== "string")
+                    continue;
+                for (const match of value.matchAll(/\$\{\{\s*(?:secrets|vars)\.([A-Za-z0-9_]+)\s*\}\}/g)) {
+                    const name = match[1];
+                    if (!targets.has(name)) {
+                        targets.set(name, new Set());
+                    }
+                    targets.get(name).add(environment !== null && environment !== void 0 ? environment : REPO_LEVEL);
+                }
+            }
+        }
+    }
+    return targets;
+};
+exports.collectSecretTargets = collectSecretTargets;
+/**
+ * pushes vault values to github via the gh cli: sensitive ones as
+ * secrets (masked), "variable"-kind ones as variables (plain) — each
+ * into the environment(s) whose jobs reference them
+ */
+const pushSecretsToGithub = async (io, repo, secrets, targets) => {
+    const environments = [
+        ...new Set([...targets.values()].flatMap((envs) => [...envs].filter((env) => env !== REPO_LEVEL))),
+    ];
+    for (const environment of environments) {
+        await (0, github_1.ensureGithubEnvironment)(repo, environment);
+        io.log(`🌍 environment ${environment}`);
+    }
+    for (const { name, value, kind } of secrets) {
+        const envs = targets.get(name);
+        if (!envs) {
+            io.log(`⏭️ ${name} (not referenced by any generated workflow)`);
+            continue;
+        }
+        for (const environment of envs) {
+            const suffix = environment === REPO_LEVEL ? "" : ` → ${environment}`;
+            if (kind === "variable") {
+                await (0, github_1.setGithubVariable)(repo, name, value, environment || undefined);
+                io.log(`📖 ${name} (variable)${suffix}`);
+            }
+            else {
+                await (0, github_1.setGithubSecret)(repo, name, value, environment || undefined);
+                io.log(`✅ ${name}${suffix}`);
+            }
+        }
+    }
+};
+exports.pushSecretsToGithub = pushSecretsToGithub;
+/**
+ * resolves the github repository from the configured git remote
+ * (`pipelines.github.gitRemote`, defaults to origin)
+ */
+const getConfiguredGithubRepo = async () => {
+    const config = await (0, getProjectConfig_1.getProjectConfig)();
+    if (!config) {
+        return undefined;
+    }
+    return (0, github_1.getGithubRepoFromRemote)((0, pipeline_1.getPipelineGitRemote)(config, "github"));
+};
+exports.getConfiguredGithubRepo = getConfiguredGithubRepo;
+/**
+ * copies the catladder secrets from the vault to github actions
+ * repository secrets, keeping the exact same names, so the github
+ * pipeline can reference them as ${{ secrets.<NAME> }}.
+ */
+exports.commandSecretsSyncGithub = (0, defineCommand_1.defineCommand)({
+    name: "project secrets-sync-github",
+    description: "copies all secrets from the vault to github repo secrets (same names), for the github pipeline",
+    group: "project",
+    inputs: {
+        repo: {
+            type: "string",
+            message: "github repository (owner/name)",
+            positional: true,
+            required: false,
+        },
+        env: {
+            type: "string",
+            message: "only sync these environments (comma-separated, e.g. review,dev) — github allows at most 100 repo secrets",
+            positional: true,
+            required: false,
+        },
+    },
+    execute: async (ctx) => {
+        var _a, _b;
+        const config = await (0, getProjectConfig_1.getProjectConfig)();
+        if (!config) {
+            throw new Error("no catladder config found");
+        }
+        const enabled = (0, pipeline_1.getEnabledPipelineTypes)(config);
+        if (!enabled.includes("github")) {
+            throw new Error("the github pipeline is not enabled in `pipelines` — nothing to sync to");
+        }
+        if (!(await (0, github_1.isGhAuthenticated)())) {
+            throw new Error("the github cli (gh) is not installed or not authenticated — run `gh auth login` first");
+        }
+        const repo = (_a = (await ctx.get("repo"))) !== null && _a !== void 0 ? _a : (await (0, exports.getConfiguredGithubRepo)());
+        if (!repo) {
+            throw new Error(`no github repository found on the '${(0, pipeline_1.getPipelineGitRemote)(config, "github")}' remote — pass it as owner/name or configure pipelines.github.gitRemote`);
+        }
+        const envFilter = (_b = (await ctx.get("env"))) === null || _b === void 0 ? void 0 : _b.split(",").map((e) => e.trim());
+        const { secrets, missing } = await (0, exports.collectSecretsFromVault)(ctx, envFilter);
+        if (missing.length > 0) {
+            ctx.log(`⚠️ ${missing.length} secrets are not set in the vault and will be skipped:`);
+            missing.forEach((name) => ctx.log(`  - ${name}`));
+            ctx.log("");
+        }
+        if (secrets.length === 0) {
+            ctx.log("no secrets to sync 🤷");
+            return;
+        }
+        ctx.log(`about to set ${secrets.length} secrets on '${repo}':`);
+        secrets.forEach(({ name }) => ctx.log(`  - ${name}`));
+        ctx.log("");
+        const confirmed = await ctx.confirm("continue? 🤔");
+        if (!confirmed) {
+            throw new Error("abort");
+        }
+        await (0, exports.pushSecretsToGithub)(ctx, repo, secrets, await (0, exports.collectSecretTargets)(config));
+        ctx.log("");
+        ctx.log("done! 😻 the github pipeline can use them as ${{ secrets.<NAME> }}");
+    },
+});
+//# sourceMappingURL=commandSecretsSyncGithub.js.map

package/dist/apps/cli/src/commands/project/commandSecretsSyncGithub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecretsSyncGithub.js","sourceRoot":"","sources":["../../../../../../src/commands/project/commandSecretsSyncGithub.ts"],"names":[],"mappings":";;;AACA,kDAK6B;AAC7B,oEAIuC;AACvC,4DAAyD;AAEzD,+CAM4B;AAE5B;;;GAGG;AACI,MAAM,uBAAuB,GAAG,KAAK,EAAE,EAAM,EAAE,SAAoB,EAAE,EAAE;IAC5E,MAAM,gBAAgB,GAAG,MAAM,IAAA,0DAAuC,GAAE,CAAC;IAEzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiC,CAAC;IACvD,KAAK,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACrE,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,IAAI,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC1C,SAAS;YACX,CAAC;YACD,MAAM,EAAE,gBAAgB,EAAE,WAAW,EAAE,GAAG,MAAM,IAAA,iCAAc,EAC5D,GAAG,EACH,aAAa,CACd,CAAC;YACF,MAAM,IAAI,GAAG;gBACX,GAAG,gBAAgB;gBACnB,GAAG,WAAW,CAAC,KAAK,CAAC,gBAAgB;gBACrC,GAAG,WAAW,CAAC,MAAM,CAAC,gBAAgB;aACvC,CAAC;YACF,IAAI,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,CAC7B,KAAK,CAAC,GAAG,CAAC,IAAA,2BAAgB,EAAC,GAAG,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,IAAI,aAAJ,IAAI,cAAJ,IAAI,GAAI,QAAQ,CAAC,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IAChC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,eAAe,EAAE,CAAC,CAAC,WAAW,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,KAAK;SAClB,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC;SAC5C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;;QAAC,OAAA,CAAC;YACd,IAAI;YACJ,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC;YACnB,IAAI,EAAE,MAAA,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,mCAAK,QAAkB;SAC7C,CAAC,CAAA;KAAA,CAAC,CAAC;IACN,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,CAAC;IACnE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC,CAAC;AAnCW,QAAA,uBAAuB,2BAmClC;AAEF,uDAAuD;AACvD,MAAM,UAAU,GAAG,EAAE,CAAC;AAEtB;;;;;;;;;;GAUG;AACI,MAAM,oBAAoB,GAAG,KAAK,EACvC,MAAc,EACqB,EAAE;;IACrC,MAAM,SAAS,GAAG,MAAM,IAAI,wBAAa,EAAE,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACpE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAuB,CAAC;IAC/C,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/C,MAAM,WAAW,GACf,OAAO,GAAG,CAAC,WAAW,KAAK,QAAQ;gBACjC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI;gBACtB,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;YACtB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,MAAA,GAAG,CAAC,GAAG,mCAAI,EAAE,CAAC,EAAE,CAAC;gBACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;oBAAE,SAAS;gBACxC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAChC,oDAAoD,CACrD,EAAE,CAAC;oBACF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;oBACtB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;wBACvB,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;oBAC/B,CAAC;oBACD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAE,CAAC,GAAG,CAAC,WAAW,aAAX,WAAW,cAAX,WAAW,GAAI,UAAU,CAAC,CAAC;gBACpD,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC,CAAC;AA1BW,QAAA,oBAAoB,wBA0B/B;AAEF;;;;GAIG;AACI,MAAM,mBAAmB,GAAG,KAAK,EACtC,EAAM,EACN,IAAY,EACZ,OAAuE,EACvE,OAAiC,EACjC,EAAE;IACF,MAAM,YAAY,GAAG;QACnB,GAAG,IAAI,GAAG,CACR,CAAC,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CACrC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,UAAU,CAAC,CAC9C,CACF;KACF,CAAC;IACF,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,IAAA,gCAAuB,EAAC,IAAI,EAAE,WAAW,CAAC,CAAC;QACjD,EAAE,CAAC,GAAG,CAAC,kBAAkB,WAAW,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,6CAA6C,CAAC,CAAC;YAChE,SAAS;QACX,CAAC;QACD,KAAK,MAAM,WAAW,IAAI,IAAI,EAAE,CAAC;YAC/B,MAAM,MAAM,GAAG,WAAW,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,WAAW,EAAE,CAAC;YACrE,IAAI,IAAI,KAAK,UAAU,EAAE,CAAC;gBACxB,MAAM,IAAA,0BAAiB,EAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,IAAI,SAAS,CAAC,CAAC;gBACrE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,cAAc,MAAM,EAAE,CAAC,CAAC;YAC3C,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAA,wBAAe,EAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,IAAI,SAAS,CAAC,CAAC;gBACnE,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,GAAG,MAAM,EAAE,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC,CAAC;AAnCW,QAAA,mBAAmB,uBAmC9B;AAEF;;;GAGG;AACI,MAAM,uBAAuB,GAAG,KAAK,IAE1C,EAAE;IACF,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAgB,GAAE,CAAC;IACxC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAA,gCAAuB,EAAC,IAAA,+BAAoB,EAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AACzE,CAAC,CAAC;AARW,QAAA,uBAAuB,2BAQlC;AAEF;;;;GAIG;AACU,QAAA,wBAAwB,GAAG,IAAA,6BAAa,EAAC;IACpD,IAAI,EAAE,6BAA6B;IACnC,WAAW,EACT,gGAAgG;IAClG,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE;QACN,IAAI,EAAE;YACJ,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,gCAAgC;YACzC,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,KAAK;SAChB;QACD,GAAG,EAAE;YACH,IAAI,EAAE,QAAQ;YACd,OAAO,EACL,0GAA0G;YAC5G,UAAU,EAAE,IAAI;YAChB,QAAQ,EAAE,KAAK;SAChB;KACF;IACD,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;;QACrB,MAAM,MAAM,GAAG,MAAM,IAAA,mCAAgB,GAAE,CAAC;QACxC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC;QAC/C,CAAC;QACD,MAAM,OAAO,GAAG,IAAA,kCAAuB,EAAC,MAAM,CAAC,CAAC;QAChD,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;YAChC,MAAM,IAAI,KAAK,CACb,wEAAwE,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,CAAC,MAAM,IAAA,0BAAiB,GAAE,CAAC,EAAE,CAAC;YACjC,MAAM,IAAI,KAAK,CACb,uFAAuF,CACxF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,MAAA,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,mCAAI,CAAC,MAAM,IAAA,+BAAuB,GAAE,CAAC,CAAC;QAC1E,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,KAAK,CACb,sCAAsC,IAAA,+BAAoB,EAAC,MAAM,EAAE,QAAQ,CAAC,0EAA0E,CACvJ,CAAC;QACJ,CAAC;QAED,MAAM,SAAS,GAAG,MAAA,CAAC,MAAM,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,0CAAE,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC1E,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,GAAG,MAAM,IAAA,+BAAuB,EAAC,GAAG,EAAE,SAAS,CAAC,CAAC;QAE3E,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,GAAG,CAAC,GAAG,CACL,MAAM,OAAO,CAAC,MAAM,wDAAwD,CAC7E,CAAC;YACF,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACd,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACzB,GAAG,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;YACjC,OAAO;QACT,CAAC;QAED,GAAG,CAAC,GAAG,CAAC,gBAAgB,OAAO,CAAC,MAAM,gBAAgB,IAAI,IAAI,CAAC,CAAC;QAChE,OAAO,CAAC,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,MAAM,SAAS,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QACpD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;QAED,MAAM,IAAA,2BAAmB,EACvB,GAAG,EACH,IAAI,EACJ,OAAO,EACP,MAAM,IAAA,4BAAoB,EAAC,MAAM,CAAC,CACnC,CAAC;QACF,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACZ,GAAG,CAAC,GAAG,CACL,oEAAoE,CACrE,CAAC;IACJ,CAAC;CACF,CAAC,CAAC"}

package/dist/apps/cli/src/commands/project/commandSecurityEvaluate.d.ts

@@ -0,0 +1 @@
+export declare const commandSecurityEvaluate: import("../../core").CommandDef<{}>;

package/dist/apps/cli/src/commands/project/commandSecurityEvaluate.js

@@ -0,0 +1,23 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.commandSecurityEvaluate = void 0;
+const defineCommand_1 = require("../../core/defineCommand");
+const evaluateSecurityAudit_1 = require("../../security/evaluateSecurityAudit");
+const projects_1 = require("../../utils/projects");
+exports.commandSecurityEvaluate = (0, defineCommand_1.defineCommand)({
+    name: "project security-evaluate",
+    description: "evaluate project's security audit document",
+    group: "project",
+    inputs: {},
+    execute: async (ctx) => {
+        const gitRoot = await (0, projects_1.getGitRoot)();
+        const result = await (0, evaluateSecurityAudit_1.evaluateSecurityAudit)({ path: gitRoot });
+        if (result.isErr()) {
+            ctx.log(`Could not evaluate security audit document: ${result.error}`);
+        }
+        else {
+            ctx.log((0, evaluateSecurityAudit_1.makeSecurityAuditOverview)(result.value));
+        }
+    },
+});
+//# sourceMappingURL=commandSecurityEvaluate.js.map

package/dist/apps/cli/src/commands/project/commandSecurityEvaluate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"commandSecurityEvaluate.js","sourceRoot":"","sources":["../../../../../../src/commands/project/commandSecurityEvaluate.ts"],"names":[],"mappings":";;;AAAA,4DAAyD;AACzD,gFAG8C;AAC9C,mDAAkD;AAErC,QAAA,uBAAuB,GAAG,IAAA,6BAAa,EAAC;IACnD,IAAI,EAAE,2BAA2B;IACjC,WAAW,EAAE,4CAA4C;IACzD,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,EAAE;IACV,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;QACrB,MAAM,OAAO,GAAG,MAAM,IAAA,qBAAU,GAAE,CAAC;QACnC,MAAM,MAAM,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAC9D,IAAI,MAAM,CAAC,KAAK,EAAE,EAAE,CAAC;YACnB,GAAG,CAAC,GAAG,CAAC,+CAA+C,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QACzE,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;CACF,CAAC,CAAC"}