@catladder/cli 0.0.0-next-401fe684 → 0.0.0-next-23a53e9e

package/dist/bundles/catenv/index.js

@@ -1586,10 +1586,14 @@ const TRIGGER_WORKFLOWS = {
   },
   taggedRelease: {
     name: "catladder release",
+    // tags pushed with the default GITHUB_TOKEN (as the release job
+    // does) don't trigger `on: push: tags` — the release job therefore
+    // also dispatches this workflow explicitly for the new tag
     on: {
       push: {
         tags: ["v*"]
-      }
+      },
+      workflow_dispatch: {}
     }
   }
 };
@@ -2164,9 +2168,11 @@ Object.defineProperty(exports, "__esModule", ({
 }));
 exports.getGithubReleaseJobs = void 0;
 const createGithubJobs_1 = __nccwpck_require__(14016);
-const createReleaseJob = (images, needs) => {
+const release_1 = __nccwpck_require__(61319);
+const createReleaseJob = (config, images, needs) => {
+  const method = (0, release_1.getReleaseMethod)(config);
   const resolved = images.resolveRef({
-    catladderImage: "semantic-release"
+    catladderImage: method.image
   });
   const imageNeeds = resolved.need && typeof resolved.need === "object" ? [(0, createGithubJobs_1.githubGlobalJobId)(resolved.need.job)] : [];
   const allNeeds = [...imageNeeds, ...(needs !== null && needs !== void 0 ? needs : [])];
@@ -2182,9 +2188,18 @@ const createReleaseJob = (images, needs) => {
         }
       } : {})
     },
-    // semantic-release pushes the version tag and release commit
+    // the release method pushes the version tag and release commit,
+    // and dispatches the taggedRelease workflow for the new tag (tags
+    // pushed with the job token don't trigger `on: push: tags`).
+    // Declaring permissions drops all default token grants, so the
+    // packages read access (needed to pull the job image from the repo
+    // registry) must be re-granted explicitly.
     permissions: {
-      contents: "write"
+      contents: "write",
+      actions: "write",
+      ...(resolved.fromRepoRegistry ? {
+        packages: "read"
+      } : {})
     },
     ...(allNeeds.length > 0 ? {
       needs: allNeeds
@@ -2195,13 +2210,14 @@ const createReleaseJob = (images, needs) => {
     steps: [{
       name: "Checkout",
       uses: "actions/checkout@v4",
-      // semantic-release needs the full history to determine the version
+      // the release method needs the full history (commits resp.
+      // tags since the last release) to determine the version
       with: {
         "fetch-depth": 0
       }
     }, {
       name: "create release",
-      run: "semanticRelease",
+      run: method.script,
       shell: "bash"
     }]
   };
@@ -2220,17 +2236,17 @@ const getGithubReleaseJobs = (config, mainWorkflowJobIds, images) => {
   if (((_a = config.releases) === null || _a === void 0 ? void 0 : _a.when) === "auto") {
     return {
       main: {
-        "create-release": createReleaseJob(images, mainWorkflowJobIds)
+        "create-release": createReleaseJob(config, images, mainWorkflowJobIds)
       },
       manual: {
-        "force-create-release": createReleaseJob(images)
+        "force-create-release": createReleaseJob(config, images)
       }
     };
   }
   return {
     main: {},
     manual: {
-      "create-release": createReleaseJob(images)
+      "create-release": createReleaseJob(config, images)
     }
   };
 };
@@ -3101,23 +3117,25 @@ Object.defineProperty(exports, "__esModule", ({
 }));
 exports.getGitlabReleaseJobs = void 0;
 const rules_1 = __nccwpck_require__(44565);
+const release_1 = __nccwpck_require__(61319);
 const EXPIRED_TOKEN_HELP = "echo '👉 If this job failed with access denied, the project access token might be invald - run `project-renew-token` in catladder CLI to fix.'";
 const baseReleaseRules = [rules_1.RULE_NEVER_ON_RELEASE_COMMIT, rules_1.RULE_NEVER_ON_AGENT_TRIGGER, rules_1.RULE_NEVER_ON_SCHEDULE];
 const getGitlabReleaseJobs = (config, images) => {
   var _a;
+  const method = (0, release_1.getReleaseMethod)(config);
   // NOTE: only the resolved image url is used, not the `need`: release
   // jobs have no `needs` on purpose — their stage ordering already
   // guarantees the image build job (setup stage) ran, and adding a
   // `needs` would switch gitlab to DAG mode, so the release job would no
   // longer wait for the build/deploy stages.
   const releaseImage = images.resolveRef({
-    catladderImage: "semantic-release"
+    catladderImage: method.image
   }).image;
   return {
     ["create release"]: {
       stage: "release",
       image: releaseImage,
-      script: ["semanticRelease"],
+      script: [method.script],
       after_script: [EXPIRED_TOKEN_HELP],
       rules: [...baseReleaseRules, {
         if: rules_1.RULE_CONDITION_MAIN_BRANCH,
@@ -3130,7 +3148,7 @@ const getGitlabReleaseJobs = (config, images) => {
     ["⚠️ force create release"]: {
       stage: "release",
       image: releaseImage,
-      script: ["semanticRelease"],
+      script: [method.script],
       after_script: [EXPIRED_TOKEN_HELP],
       needs: [],
       rules: [...baseReleaseRules, {
@@ -5352,7 +5370,7 @@ Object.defineProperty(exports, "__esModule", ({
   value: true
 }));
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "next-401fe684" || 0;
+exports.PIPELINE_IMAGE_TAG = "next-23a53e9e" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
@@ -6361,6 +6379,7 @@ exports.RUNNER_IMAGE_BUILD_CONTEXT = {
   "docker-build": "self",
   gcloud: "self",
   "semantic-release": "self",
+  changesets: "self",
   "agent-claude": "self"
 };
 /**
@@ -8801,6 +8820,7 @@ __exportStar(__nccwpck_require__(38045), exports);
 __exportStar(__nccwpck_require__(51398), exports);
 __exportStar(__nccwpck_require__(88025), exports);
 __exportStar(__nccwpck_require__(39871), exports);
+__exportStar(__nccwpck_require__(61319), exports);
 __exportStar(__nccwpck_require__(45585), exports);
 __exportStar(__nccwpck_require__(47666), exports);
 __exportStar(__nccwpck_require__(60250), exports);
@@ -9840,6 +9860,34 @@ exports.getWorkspaceDependencies = getWorkspaceDependencies;
 
 /***/ }),
 
+/***/ 61319:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+
+Object.defineProperty(exports, "__esModule", ({
+  value: true
+}));
+exports.getReleaseMethod = exports.RELEASE_METHODS = void 0;
+exports.RELEASE_METHODS = {
+  "semantic-release": {
+    image: "semantic-release",
+    script: "semanticRelease"
+  },
+  changesets: {
+    image: "changesets",
+    script: "changesetsRelease"
+  }
+};
+const getReleaseMethod = config => {
+  var _a, _b;
+  return exports.RELEASE_METHODS[(_b = (_a = config.releases) === null || _a === void 0 ? void 0 : _a.method) !== null && _b !== void 0 ? _b : "semantic-release"];
+};
+exports.getReleaseMethod = getReleaseMethod;
+
+/***/ }),
+
 /***/ 44565:
 /***/ ((__unused_webpack_module, exports) => {
 

package/dist/bundles/cli/index.js

@@ -7634,10 +7634,14 @@ const TRIGGER_WORKFLOWS = {
   },
   taggedRelease: {
     name: "catladder release",
+    // tags pushed with the default GITHUB_TOKEN (as the release job
+    // does) don't trigger `on: push: tags` — the release job therefore
+    // also dispatches this workflow explicitly for the new tag
     on: {
       push: {
         tags: ["v*"]
-      }
+      },
+      workflow_dispatch: {}
     }
   }
 };
@@ -8212,9 +8216,11 @@ Object.defineProperty(exports, "__esModule", ({
 }));
 exports.getGithubReleaseJobs = void 0;
 const createGithubJobs_1 = __nccwpck_require__(14016);
-const createReleaseJob = (images, needs) => {
+const release_1 = __nccwpck_require__(61319);
+const createReleaseJob = (config, images, needs) => {
+  const method = (0, release_1.getReleaseMethod)(config);
   const resolved = images.resolveRef({
-    catladderImage: "semantic-release"
+    catladderImage: method.image
   });
   const imageNeeds = resolved.need && typeof resolved.need === "object" ? [(0, createGithubJobs_1.githubGlobalJobId)(resolved.need.job)] : [];
   const allNeeds = [...imageNeeds, ...(needs !== null && needs !== void 0 ? needs : [])];
@@ -8230,9 +8236,18 @@ const createReleaseJob = (images, needs) => {
         }
       } : {})
     },
-    // semantic-release pushes the version tag and release commit
+    // the release method pushes the version tag and release commit,
+    // and dispatches the taggedRelease workflow for the new tag (tags
+    // pushed with the job token don't trigger `on: push: tags`).
+    // Declaring permissions drops all default token grants, so the
+    // packages read access (needed to pull the job image from the repo
+    // registry) must be re-granted explicitly.
     permissions: {
-      contents: "write"
+      contents: "write",
+      actions: "write",
+      ...(resolved.fromRepoRegistry ? {
+        packages: "read"
+      } : {})
     },
     ...(allNeeds.length > 0 ? {
       needs: allNeeds
@@ -8243,13 +8258,14 @@ const createReleaseJob = (images, needs) => {
     steps: [{
       name: "Checkout",
       uses: "actions/checkout@v4",
-      // semantic-release needs the full history to determine the version
+      // the release method needs the full history (commits resp.
+      // tags since the last release) to determine the version
       with: {
         "fetch-depth": 0
       }
     }, {
       name: "create release",
-      run: "semanticRelease",
+      run: method.script,
       shell: "bash"
     }]
   };
@@ -8268,17 +8284,17 @@ const getGithubReleaseJobs = (config, mainWorkflowJobIds, images) => {
   if (((_a = config.releases) === null || _a === void 0 ? void 0 : _a.when) === "auto") {
     return {
       main: {
-        "create-release": createReleaseJob(images, mainWorkflowJobIds)
+        "create-release": createReleaseJob(config, images, mainWorkflowJobIds)
       },
       manual: {
-        "force-create-release": createReleaseJob(images)
+        "force-create-release": createReleaseJob(config, images)
       }
     };
   }
   return {
     main: {},
     manual: {
-      "create-release": createReleaseJob(images)
+      "create-release": createReleaseJob(config, images)
     }
   };
 };
@@ -9149,23 +9165,25 @@ Object.defineProperty(exports, "__esModule", ({
 }));
 exports.getGitlabReleaseJobs = void 0;
 const rules_1 = __nccwpck_require__(44565);
+const release_1 = __nccwpck_require__(61319);
 const EXPIRED_TOKEN_HELP = "echo '👉 If this job failed with access denied, the project access token might be invald - run `project-renew-token` in catladder CLI to fix.'";
 const baseReleaseRules = [rules_1.RULE_NEVER_ON_RELEASE_COMMIT, rules_1.RULE_NEVER_ON_AGENT_TRIGGER, rules_1.RULE_NEVER_ON_SCHEDULE];
 const getGitlabReleaseJobs = (config, images) => {
   var _a;
+  const method = (0, release_1.getReleaseMethod)(config);
   // NOTE: only the resolved image url is used, not the `need`: release
   // jobs have no `needs` on purpose — their stage ordering already
   // guarantees the image build job (setup stage) ran, and adding a
   // `needs` would switch gitlab to DAG mode, so the release job would no
   // longer wait for the build/deploy stages.
   const releaseImage = images.resolveRef({
-    catladderImage: "semantic-release"
+    catladderImage: method.image
   }).image;
   return {
     ["create release"]: {
       stage: "release",
       image: releaseImage,
-      script: ["semanticRelease"],
+      script: [method.script],
       after_script: [EXPIRED_TOKEN_HELP],
       rules: [...baseReleaseRules, {
         if: rules_1.RULE_CONDITION_MAIN_BRANCH,
@@ -9178,7 +9196,7 @@ const getGitlabReleaseJobs = (config, images) => {
     ["⚠️ force create release"]: {
       stage: "release",
       image: releaseImage,
-      script: ["semanticRelease"],
+      script: [method.script],
       after_script: [EXPIRED_TOKEN_HELP],
       needs: [],
       rules: [...baseReleaseRules, {
@@ -11400,7 +11418,7 @@ Object.defineProperty(exports, "__esModule", ({
   value: true
 }));
 exports.DOCKER_REGISTRY = exports.PIPELINE_IMAGE_TAG = void 0;
-exports.PIPELINE_IMAGE_TAG = "next-401fe684" || 0;
+exports.PIPELINE_IMAGE_TAG = "next-23a53e9e" || 0;
 exports.DOCKER_REGISTRY = "git.panter.ch:5001/catladder/catladder" || 0;
 
 /***/ }),
@@ -12409,6 +12427,7 @@ exports.RUNNER_IMAGE_BUILD_CONTEXT = {
   "docker-build": "self",
   gcloud: "self",
   "semantic-release": "self",
+  changesets: "self",
   "agent-claude": "self"
 };
 /**
@@ -14849,6 +14868,7 @@ __exportStar(__nccwpck_require__(38045), exports);
 __exportStar(__nccwpck_require__(51398), exports);
 __exportStar(__nccwpck_require__(88025), exports);
 __exportStar(__nccwpck_require__(39871), exports);
+__exportStar(__nccwpck_require__(61319), exports);
 __exportStar(__nccwpck_require__(45585), exports);
 __exportStar(__nccwpck_require__(47666), exports);
 __exportStar(__nccwpck_require__(60250), exports);
@@ -15888,6 +15908,34 @@ exports.getWorkspaceDependencies = getWorkspaceDependencies;
 
 /***/ }),
 
+/***/ 61319:
+/***/ ((__unused_webpack_module, exports) => {
+
+"use strict";
+
+
+Object.defineProperty(exports, "__esModule", ({
+  value: true
+}));
+exports.getReleaseMethod = exports.RELEASE_METHODS = void 0;
+exports.RELEASE_METHODS = {
+  "semantic-release": {
+    image: "semantic-release",
+    script: "semanticRelease"
+  },
+  changesets: {
+    image: "changesets",
+    script: "changesetsRelease"
+  }
+};
+const getReleaseMethod = config => {
+  var _a, _b;
+  return exports.RELEASE_METHODS[(_b = (_a = config.releases) === null || _a === void 0 ? void 0 : _a.method) !== null && _b !== void 0 ? _b : "semantic-release"];
+};
+exports.getReleaseMethod = getReleaseMethod;
+
+/***/ }),
+
 /***/ 44565:
 /***/ ((__unused_webpack_module, exports) => {
 

package/dist/bundles/runner-images/changesets/Dockerfile

@@ -0,0 +1,13 @@
+FROM node:lts-alpine
+
+RUN apk add --no-cache bash git git-lfs
+
+# no release tooling baked in: the changesets release logic lives in
+# catci, which is materialized into the repository checkout
+# (.catladder-generated/catci) by pipeline generation
+
+RUN mkdir -p /scripts
+COPY ./scripts/* /scripts/
+RUN chmod +x /scripts/*
+
+ENV PATH="/scripts:${PATH}"

package/dist/bundles/runner-images/changesets/scripts/changesetsRelease

@@ -0,0 +1,37 @@
+#!/bin/bash
+set -e
+
+# 0. check and evaluate security audit or create MR with security audit template (and exit 1)
+# 1. compute the next version from the last v* tag + pending .changeset/*.md files
+# 2. write the changelog, commit, tag and push (all done by catci)
+
+# NOTE: keep the security-audit gate below in sync with
+# runner-images/semantic-release/scripts/semanticRelease
+
+if [ "$GITHUB_ACTIONS" = "true" ]; then
+  # github container jobs: the workspace volume is owned by the host
+  # runner user while this step runs as the container user, and the
+  # safe.directory entry actions/checkout writes goes to a temporary
+  # HOME that is gone by now — git would refuse the repo ("dubious
+  # ownership")
+  git config --global --add safe.directory "$(pwd)"
+fi
+
+echo "doing security audit check"
+CATCI=".catladder-generated/catci/index.js"
+if [ -f "$CATCI" ]; then
+  # catci is materialized by pipeline generation — always the exact
+  # catladder version that generated this pipeline
+  if [ "$GITHUB_ACTIONS" = "true" ]; then
+    # github: gate only — the MR remediation is gitlab-specific
+    node "$CATCI" security-audit check ./
+  else
+    node "$CATCI" security-audit ci-job ./ "$GL_TOKEN" "$CI_DEFAULT_BRANCH" "$CI_PROJECT_ID" "$GITLAB_USER_ID"
+  fi
+else
+  echo "$CATCI not found — regenerate the pipeline with a current catladder version (catenv)"
+  exit 1
+fi
+
+echo "doing changesets release"
+node "$CATCI" release changesets

package/dist/bundles/runner-images/semantic-release/Dockerfile

@@ -7,6 +7,10 @@ FROM node:22-alpine
 RUN apk add --no-cache bash git git-lfs
 
 # add semantic release
+# NOTE: keep every plugin pinned to a major that is compatible with
+# semantic-release@19 (they declare `semantic-release` as a peer dependency).
+# Unpinned plugins drift to their latest major on image rebuild, which now
+# requires semantic-release>=20 and fails with "plugins configuration is invalid".
 RUN yarn global add \
     semantic-release@19.0.5 \
     @semantic-release/commit-analyzer@13.0.1 \

package/dist/bundles/runner-images/semantic-release/scripts/semanticRelease

@@ -8,6 +8,15 @@ set -e
 
 # better branches settings: https://github.com/semantic-release/semantic-release/issues/1581
 
+if [ "$GITHUB_ACTIONS" = "true" ]; then
+  # github container jobs: the workspace volume is owned by the host
+  # runner user while this step runs as the container user, and the
+  # safe.directory entry actions/checkout writes goes to a temporary
+  # HOME that is gone by now — git would refuse the repo ("dubious
+  # ownership", surfacing as ENOGITREPO from semantic-release)
+  git config --global --add safe.directory "$(pwd)"
+fi
+
 echo "doing security audit check"
 CATCI=".catladder-generated/catci/index.js"
 if [ -f "$CATCI" ]; then
@@ -30,6 +39,18 @@ fi
 
 echo "doing semantic release"
 
+if [ "$GITHUB_ACTIONS" = "true" ]; then
+  # the gitlab publish plugin would fail on github; skip it (the tag
+  # and changelog commit still happen, only the gitlab release entry
+  # is gitlab-specific)
+  PUBLISH_PLUGIN=""
+else
+  PUBLISH_PLUGIN=',
+    ["@semantic-release/gitlab", {
+      "gitlabUrl": "https://git.panter.ch"
+    }]'
+fi
+
 if [ ! -e .releaserc ]; then
   cat >.releaserc <<EOF
 {
@@ -58,10 +79,7 @@ if [ ! -e .releaserc ]; then
     "@semantic-release/changelog",
     ["@semantic-release/git", {
       "message": "chore(\${branch.type}): \${nextRelease.version}\n\n\${nextRelease.notes}"
-    }],
-    ["@semantic-release/gitlab", {
-      "gitlabUrl": "https://git.panter.ch"
-    }]
+    }]${PUBLISH_PLUGIN}
     ],
   "branches": [
     "+([0-9])?(.{+([0-9]),x}).x",
@@ -81,4 +99,25 @@ if [ ! -e .releaserc ]; then
 }
 EOF
 fi
+
+if [ "$GITHUB_ACTIONS" = "true" ]; then
+  TAGS_BEFORE=$(git tag --list 'v[0-9]*')
+fi
+
 semantic-release
+
+# tags pushed with the default GITHUB_TOKEN don't trigger `on: push:
+# tags` workflows (github's recursion guard) — dispatch the
+# taggedRelease workflow explicitly for a tag semantic-release created
+if [ "$GITHUB_ACTIONS" = "true" ] && [ -f "$CATCI" ]; then
+  if [ -z "$TAGS_BEFORE" ]; then
+    NEW_TAG=$(git tag --list 'v[0-9]*' | tail -n1)
+  else
+    NEW_TAG=$(git tag --list 'v[0-9]*' | grep -Fxv -f <(printf '%s\n' "$TAGS_BEFORE") | tail -n1 || true)
+  fi
+  if [ -n "$NEW_TAG" ]; then
+    node "$CATCI" release dispatch-tagged-workflow "$NEW_TAG"
+  else
+    echo "no new release tag created — skipping taggedRelease dispatch"
+  fi
+fi

package/dist/cli/src/catci.js

@@ -18,6 +18,7 @@ Object.defineProperty(exports, "__esModule", {
 const rest_1 = require("@gitbeaker/rest");
 const evaluateSecurityAudit_1 = require("./security/evaluateSecurityAudit");
 const createSecurityAuditMergeRequest_1 = require("./security/createSecurityAuditMergeRequest");
+const changesetsReleaseJob_1 = require("./release/changesetsReleaseJob");
 const GITLAB_HOST = "https://git.panter.ch";
 const USAGE = `catci — catladder CI companion
 
@@ -30,6 +31,15 @@ usage:
       evaluates ${createSecurityAuditMergeRequest_1.SECURITY_AUDIT_FILE_NAME}; exits 1 with instructions when
       the document is missing or unanswered (no remediation — works on
       any CI, including github)
+
+  catci release changesets
+      consumes pending .changeset/*.md files: computes the next version
+      from the last v* tag, writes the changelog, commits, tags and
+      pushes (no-op when no changesets are pending)
+
+  catci release dispatch-tagged-workflow <tag>
+      github only: dispatches the generated taggedRelease workflow for
+      the tag (tags pushed with the job token don't trigger it)
 `;
 const fail = message => {
   console.error(message);
@@ -93,6 +103,12 @@ const main = async () => {
   if (group === "security-audit" && command === "check" && args.length === 1) {
     return securityAuditCheck(args[0]);
   }
+  if (group === "release" && command === "changesets" && args.length === 0) {
+    return (0, changesetsReleaseJob_1.changesetsReleaseJob)();
+  }
+  if (group === "release" && command === "dispatch-tagged-workflow" && args.length === 1) {
+    return (0, changesetsReleaseJob_1.dispatchTaggedReleaseWorkflow)(args[0]);
+  }
   fail(USAGE);
 };
 main().catch(error => {

package/dist/cli/src/catci.js.map

@@ -1 +1 @@
-{"version":3,"file":"catci.js","sourceRoot":"","sources":["../../../src/catci.ts"],"names":[],"mappings":";;AAAA;;;;;;;;;;;GAWG;AACH,0CAAyC;AACzC,4EAG0C;AAC1C,gGAGoD;AAEpD,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C,MAAM,KAAK,GAAG;;;;kBAII,0DAAwB;;;;kBAIxB,0DAAwB;;;CAGzC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAC1C,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CACF,yCAAyC;YACvC,oCAAoC,0DAAwB,4DAA4D,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,KAAK,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAChD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CACF,sBAAsB,0DAAwB,IAAI;YAChD,gBAAgB,0DAAwB,6CAA6C;YACrF,4EAA4E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAY,EACZ,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,EAAE;IACF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,MAAM,IAAA,iEAA+B,EAAC;QAC/C,GAAG;QACH,UAAU;QACV,SAAS;QACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;KACzB,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,CACF,gEAAgE,EAAE,CAAC,KAAK,EAAE,CAC3E,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CACT,oCAAoC,0DAAwB,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CACpF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;IACtB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC1D,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC;AACd,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,CAAC,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC"}
+{"version":3,"file":"catci.js","sourceRoot":"","sources":["../../../src/catci.ts"],"names":[],"mappings":";;AAAA;;;;;;;;;;;GAWG;AACH,0CAAyC;AACzC,4EAG0C;AAC1C,gGAGoD;AACpD,yEAGwC;AAExC,MAAM,WAAW,GAAG,uBAAuB,CAAC;AAE5C,MAAM,KAAK,GAAG;;;;kBAII,0DAAwB;;;;kBAIxB,0DAAwB;;;;;;;;;;;;CAYzC,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,OAAe,EAAS,EAAE;IACtC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACvB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF;;;;GAIG;AACH,MAAM,YAAY,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAC1C,MAAM,UAAU,GAAG,MAAM,IAAA,6CAAqB,EAAC,EAAE,IAAI,EAAE,CAAC,CAAC;IACzD,IAAI,UAAU,CAAC,KAAK,EAAE,EAAE,CAAC;QACvB,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,cAAc,KAAK,CAAC,EAAE,CAAC;QAChD,IAAI,CACF,yCAAyC;YACvC,oCAAoC,0DAAwB,4DAA4D,CAC3H,CAAC;IACJ,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAA,iDAAyB,EAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,OAAO,UAAU,CAAC,KAAK,CAAC;AAC1B,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAAE,IAAY,EAAE,EAAE;IAChD,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,CAAC,UAAU,EAAE,CAAC;QAChB,IAAI,CACF,sBAAsB,0DAAwB,IAAI;YAChD,gBAAgB,0DAAwB,6CAA6C;YACrF,4EAA4E,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,kBAAkB,GAAG,KAAK,EAC9B,IAAY,EACZ,KAAa,EACb,UAAkB,EAClB,SAAiB,EACjB,MAAc,EACd,EAAE;IACF,MAAM,UAAU,GAAG,MAAM,YAAY,CAAC,IAAI,CAAC,CAAC;IAC5C,IAAI,UAAU,EAAE,CAAC;QACf,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,4CAA4C,CAAC,CAAC;IAC1D,OAAO,CAAC,GAAG,CAAC,4DAA4D,CAAC,CAAC;IAE1E,MAAM,GAAG,GAAG,IAAI,aAAM,CAAC,EAAE,IAAI,EAAE,WAAW,EAAE,KAAK,EAAE,CAAC,CAAC;IACrD,MAAM,EAAE,GAAG,MAAM,IAAA,iEAA+B,EAAC;QAC/C,GAAG;QACH,UAAU;QACV,SAAS;QACT,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC;KACzB,CAAC,CAAC;IAEH,IAAI,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC;QACf,IAAI,CACF,gEAAgE,EAAE,CAAC,KAAK,EAAE,CAC3E,CAAC;QACF,OAAO;IACT,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,mDAAmD,CAAC,CAAC;IACjE,OAAO,CAAC,GAAG,CACT,oCAAoC,0DAAwB,KAAK,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,CACpF,CAAC;IACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,IAAI,GAAG,KAAK,IAAI,EAAE;IACtB,MAAM,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACxD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5E,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;QAC1D,OAAO,kBAAkB,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,KAAK,KAAK,gBAAgB,IAAI,OAAO,KAAK,OAAO,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,OAAO,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,CAAC;IACD,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,YAAY,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,IAAA,2CAAoB,GAAE,CAAC;IAChC,CAAC;IACD,IACE,KAAK,KAAK,SAAS;QACnB,OAAO,KAAK,0BAA0B;QACtC,IAAI,CAAC,MAAM,KAAK,CAAC,EACjB,CAAC;QACD,OAAO,IAAA,oDAA6B,EAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,CAAC;AACd,CAAC,CAAC;AAEF,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,IAAI,CAAC,iBAAiB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC1E,CAAC,CAAC,CAAC"}

package/dist/cli/src/release/changesets.d.ts

@@ -0,0 +1,44 @@
+export declare const BUMPS: readonly ["patch", "minor", "major"];
+export type Bump = (typeof BUMPS)[number];
+export type Changeset = {
+  fileName: string;
+  bump: Bump;
+  summary: string;
+};
+/**
+ * parses one changeset markdown file (official changesets format):
+ *
+ * ```
+ * ---
+ * "some-package": minor
+ * ---
+ *
+ * human-written summary
+ * ```
+ *
+ * The frontmatter is parsed by `@changesets/parse` (real YAML), then
+ * reduced to a single effective bump: `none` releases are dropped
+ * (they intentionally request no version change) and the highest of the
+ * rest wins. Throws on files that aren't valid changesets — a malformed
+ * file in `.changeset/` is a mistake worth failing the release over,
+ * not skipping silently.
+ */
+export declare const parseChangesetFile: (fileName: string, content: string) => Changeset;
+export declare const maxBump: (bumps: readonly Bump[]) => Bump;
+/**
+ * the next version, derived from the last release tag (like
+ * semantic-release does). No previous tag → first release 1.0.0
+ * (matching semantic-release's first release).
+ */
+export declare const getNextVersion: (lastTag: string | null, bump: Bump) => string;
+/**
+ * the changelog entries for one release, grouped by bump level
+ * (mirroring the official changesets changelog layout), without the
+ * version heading — also used as the release commit body
+ */
+export declare const renderChangelogEntries: (changesets: readonly Changeset[]) => string;
+/**
+ * prepends the release section to the changelog, keeping the
+ * `# Changelog` header on top
+ */
+export declare const prependToChangelog: (existingContent: string | null, version: string, date: string, entries: string) => string;